For EdTech & Schools

Verifiable parental consent.
Protected student data.

Schools and EdTech platforms collect more sensitive data on children than almost any other industry - Aadhaar, birth certificates, photos, medical history, location, behavior. Under DPDP, processing data of anyone under 18 requires verifiable parental consent, the strictest safeguards, and a complete prohibition on behavioral tracking without explicit approval. SecureConsent makes this automatic.

Built for DPDP Rules 2025 · Data stored in India · Verifiable parental consent

A child's school file contains more personal data than their passport - and DPDP knows it.

Under 18
DPDP Section 9 treats all data of children as "special category" requiring verifiable parental consent, strict purpose limitation, and no behavioral tracking without explicit approval.
15+ Docs
Aadhaar, birth certificate, address proof, parent ID, photos, medical history, immunization records, bank details for fees - collected per student on average.
₹200 Cr
Maximum penalty specifically for processing children's data without verifiable parental consent - higher than standard DPDP penalties.

Every admission season, schools collect mountains of paper. Aadhaar cards, birth certificates, income certificates, caste certificates, medical forms, transfer certificates, parent PAN, and passport-size photographs. This sits in unlocked cabinets, is shared with transport vendors and cafeteria operators without consent, and is never deleted when the student leaves. Under DPDP, a parent can now demand the complete data trail, withdraw consent for photo use in the school brochure, and ask for deletion of everything except legally required academic records. Most schools have no mechanism to do this.

From admission to alumni. Every touchpoint. Every guardian. Every law.

Verifiable Parental Consent

Before any data is collected, the parent - not the student - receives a secure consent link. They verify identity via Aadhaar OTP, then choose exactly what the school can do with their child's data. No pre-checked boxes. No blanket permissions.

  • Parent identity verified via Aadhaar OTP before consent is valid
  • Purpose-specific: academics, photos, transport, cafeteria, third-party apps
  • Consent renewal every academic year with single-click update
  • Auto-withdrawal when student exits or transfers

Student Document Vault

Parents upload Aadhaar, birth certificate, income proof, and medical records once. The school accesses them when needed. When the student graduates or transfers, non-academic documents are auto-purged with a deletion certificate.

  • SHA-256 proof hash for every document uploaded
  • Certificate of storage on admission, certificate of deletion on exit
  • Every document access logged - which staff member, when, why
  • DigiLocker-ready for government-verified document submission

No Behavioral Tracking Without Explicit Approval

DPDP Section 9 prohibits tracking, behavioral monitoring, and targeted advertising for children. Parents must explicitly approve any analytics, attention tracking, or engagement profiling on EdTech platforms.

  • Platform tracks only what the parent explicitly approved
  • Real-time dashboard showing what data is being collected during each session
  • Auto-block on third-party analytics and ad pixels when child consent is active
  • Parent receives weekly summary of data accessed and learning metrics shared

Vendor & Third-Party Governance

Schools share student data with transport operators, cafeteria vendors, uniform suppliers, and EdTech platforms. Under DPDP, the school remains liable for how vendors handle this data. SecureConsent governs every handoff.

  • Role-based access for transport, cafeteria, security, and EdTech vendors
  • Vendor consent limited to specific purpose - no vendor sees academic records
  • Real-time withdrawal sync - parent says stop, vendor loses access instantly
  • Audit trail for CBSE / state board inspections showing full data governance

From admission enquiry to graduation certificate - fully compliant.

01
Admission

Parent verifies identity and gives granular consent before any data is collected

The parent fills the online admission enquiry. They receive a SecureConsent link via SMS and email. They verify their identity with Aadhaar OTP, then choose what the school can do: access academic records, take photographs, share location with the bus operator, use their photo in brochures, enroll in third-party learning apps. Every purpose is individually selectable. Nothing is pre-checked.

02
Academic year

Consent renews automatically. Parents see everything. Schools stay compliant.

At the start of each academic year, parents receive a one-click renewal link: "Continue last year's settings, or update." If a new app is introduced mid-year, the school sends a new consent request - not a terms-of-service popup that no one reads. Parents see a real-time dashboard of what data was accessed and by which vendor. The school receives a compliance health score for board inspections.

03
Transfer or graduation

Non-academic data auto-purges. Academic records transfer securely. Certificates issued.

The student graduates or transfers. Within 30 days, all non-academic data - photos, medical history, transport records, cafeteria preferences - is purged with a certificate of deletion sent to the parent. Academic records and transfer certificates are securely shared with the new institution via an encrypted link with a 7-day expiry. The parent receives proof of every action.

K-12 school or online learning platform. Same parental protection.

K-12 Schools & Preschools

Manage admission consent, annual renewal, photo release for events, transport tracking permissions, and vendor access for canteen and uniform suppliers. Full audit trail for CBSE, ICSE, and state board compliance inspections. Parental withdrawal honored instantly across all connected systems.

Join early access →

Coaching & Test Prep Centers

Students spend 6-12 hours daily at your center. You collect Aadhaar, parent contact, attendance, performance data, and in some cases biometric attendance. Parents control what the center can track and whether performance data can be shared with scholarship platforms or college partners.

Join early access →

EdTech & Online Learning Platforms

Every video watched, every pause, every replay is behavioral data. DPDP Section 9 requires explicit parental approval for any tracking of children. Parents see what is collected, approve or decline analytics, and receive weekly summaries. Platform compliance report ready for investor due diligence.

Join early access →

Parent

See exactly what data your child's school or EdTech app has collected. Withdraw consent for photo use, third-party apps, or behavioral tracking any time. Receive a certificate when your child's data is deleted after graduation or transfer. Correct errors instantly without visiting the school office.

Verify your child's consent →

Received a consent link from your child's school?

If a school, coaching center, or learning app sent you a SecureConsent link, your child's Aadhaar, photos, academic records, and location data are being handled under India's DPDP Act - with the strictest protections for children.

Right to know

See exactly what data was collected about your child, who accessed it - teachers, vendors, apps - and for what purpose. Every access is logged.

Right to correct

Wrong birth date? Wrong allergy listed? Update it in your parent portal and it syncs to the school's system instantly. No forms to fill at the office.

Right to withdraw

Decline photo use in the school brochure. Stop location tracking by the bus operator. Withdraw consent for a third-party learning app. All effective immediately.

Store once, use across schools

Upload your child's documents to your vault once. Share securely with any school or coaching center. DigiLocker and ABHA integration coming soon.

Certificates for every action

Receive a certificate when your child's data is stored, accessed by a new vendor, or permanently deleted after graduation. Proof the school complied.

Annual renewal control

Consent does not last forever. Every year you review and renew - or update - what the school can do. One-click approval or granular changes.

Verify a consent record

Enter your phone number or the consent ID from the school link to see exactly what consents are recorded for your child.

Your data is looked up securely. Nothing is stored during this check.

Integrate with your existing Student Information System

SecureConsent's Core API connects to your SIS, LMS, admission portal, or EdTech platform. Embed DPDP-compliant parental consent into enrollment workflows without rebuilding your product.

POST https://api.secureconsent.in/v1/consent
{
"principal_id": "student_55291",
"parent_id": "parent_22901",
"purposes": ["academic_records", "photos_events", "transport_tracking"],
"source": "admission_portal",
"language": "en",
"age": "14",
"parent_verified": "aadhaar_otp",
"behavioral_tracking": "false"
}
→ 200 OK
{
"consent_id": "cns_e8c3b41d",
"proof_hash": "sha256:e8c3...b41d",
"parent_verified": "true",
"child_protection_active": "true",
"parent_portal_url": "https://parent.secureconsent.in/..."
}

Every document access and vendor handoff is logged. Request a certificate of storage on admission and a certificate of deletion on graduation - both cryptographically signed and board-inspection-ready.

Don't let DPDP catch your school unprepared.

Schools that demonstrate transparent data governance will win parent trust over schools that hide behind paper forms and vague permissions. Be the first in your district.

Launching Q3 2026. Built for Indian schools and EdTech. No credit card required.