Skip to content

Security

Security for the student data you're trusted with

How Grad-Tracker protects institutional data: where it's hosted, how it's isolated, who can see it, and how changes are recorded.

01

Hosting and encryption

Grad-Tracker runs on Microsoft Azure in the United States. All traffic uses HTTPS, and the database and file storage are encrypted at rest.

02

Separate data for every institution

Each institution's data is isolated from every other institution's, and every request is checked against the institution and departments the user belongs to. The database sits on a private network with no public internet access.

03

Access control

Role-based permissions with department-level scoping. Sessions expire after 12 hours and are re-checked on every request, so removing or changing a user takes effect immediately. Sign-in attempts are rate limited.

04

Accountability

Changes to records are written to an audit log with who made them and when. Survey responses are reviewed before they update a record, and administrator sign-ins as another user are recorded.

05

Secrets and infrastructure

Application secrets are held in Azure Key Vault and services authenticate with managed identities, so no passwords live in our code. Deployments use short-lived credentials with the narrowest permissions needed.

06

Secure development

Every change goes through automated testing, code scanning and secret scanning before it can ship, and dependencies are monitored for known vulnerabilities.

See Grad-Tracker in action

Request a demo and we'll set you up with your own login to a fully loaded sample university. Every module is switched on.

Security and Data Protection | Grad-Tracker