Infrastructure

Enterprise-grade security. Not an afterthought.

Database-level isolation. 15-tier RBAC. MFA. SSO. Full audit trail.

Before Scholova

Student data shared in plain text files with no access control audit trail

All staff using the same login credentials with no role differentiation

No data isolation between tenants at the database level

With Scholova

Each school's data is isolated at the database layer — not just the application layer

15-tier RBAC enforces exact role requirements on every API endpoint

Full audit trail logs every mutation with who, what, when, and IP

What's Inside

Key capabilities

Database-Level Tenant Isolation

Each school's data is isolated at the database layer, not application code. No cross-tenant leakage, by design.

15-Tier RBAC

From Super Admin to Student, every API endpoint enforces exact role requirements.

Multi-Role Access

Staff can hold simultaneous roles — Teacher, Nurse, and Form Tutor in one session.

MFA & SSO

TOTP authentication, SAML 2.0, and OIDC for enterprise identity providers.

Full Audit Trail

Every mutation logged with who, what, when, and IP address.

API & Webhooks

RESTful API with key management and webhook system for external integrations.

See Security, RBAC & Infrastructure in Scholova

school.scholova.space/security
Security, RBAC & Infrastructure — school.scholova.space/security

Scholova audit log and RBAC configuration

Full Detail

Everything Security, RBAC & Infrastructure includes

Database-Level Tenant Isolation

Each school's data is isolated at the database layer, not application code. No cross-tenant leakage, by design.

15-Tier RBAC

From Super Admin to Student, every API endpoint enforces exact role requirements.

Multi-Role Access

Staff can hold simultaneous roles — Teacher, Nurse, and Form Tutor in one session.

MFA & SSO

TOTP authentication, SAML 2.0, and OIDC for enterprise identity providers.

Full Audit Trail

Every mutation logged with who, what, when, and IP address.

API & Webhooks

RESTful API with key management and webhook system for external integrations.

Connects with

All ModulesSAML Identity ProvidersOIDC Providers

See Security, RBAC & Infrastructure in action.

Book a 30-minute walkthrough with our team, or explore the live demo yourself.