Security & Architecture
Engineered from Day One for Zero-Trust Educational Multi-Tenancy
1. Security Principles
DhruvaOS is built on strict Zero-Trust architecture, ensuring physical and cryptographic data segregation across institutions, zero developer backdoors, and end-to-end auditability.
PostgreSQL database queries enforce tenant Row-Level Security (RLS) and dedicated schemas (tenant_{slug}), mathematically preventing cross-tenant data leaks.
Identity federation powered by Zitadel OIDC with cryptographic RS256 token verification, time-based one-time passwords (TOTP), and enterprise SAML integrations.
Sensitive PII columns (student medical records, guardian bank account numbers) are encrypted at rest using Fernet / AES-256 with KMS master keys.
Every critical database mutation is logged with an HMAC-SHA256 signature, creating an unalterable audit trail for institutional compliance.
Responsible Security Disclosure
If you discover a vulnerability, please report it directly to our security team. We acknowledge and reward responsible security disclosures.
Security & Inquiries: contact@neelstack.com