Our Security Commitment
educationcrm.uz takes technical and organisational measures to protect data. Servers use SSL/TLS encryption, the database is backed up regularly, and access is limited by user role. In an emergency, data is restored and users are notified.
Encryption and Transport Security
All data is strongly encrypted in transit:
- 🔒 SSL/TLS encryption: the 256-bit AES encryption standard is used
- 🔒 HTTPS protocol: every page is served over a secure HTTPS connection
- 🔒 Password hashing: passwords are securely hashed with the bcrypt algorithm
Certificates: we use Let's Encrypt and other recognised certificate authorities
Access Control and Authentication
Only authorised people can see the data:
- Role-based access control (RBAC): director, manager, teacher and student roles
- Two-factor authentication (2FA): an extra layer of security (optional)
- Session management: automatic logout and a session time limit
- Login attempt limits: a temporary lockout after wrong passwords
Data Backup and Recovery
Regular backups and a recovery plan:
📦 Automatic Backups
- → Daily full database backups
- → Backups are kept for 14 days
🔄 Recovery
- → A restore script exists and has been tested
- → A rapid recovery plan for emergencies
Monitoring and Logging
Continuous monitoring of system security:
- 👁️ System monitoring: service health and metrics are collected continuously (Prometheus / Grafana)
- 👁️ Firewall protection: filtering out malicious traffic
- 👁️ Logging: every important action is recorded
Security Audits and Testing
Regular security reviews:
- Code review: changes are reviewed before they go to production
- Security updates: continuous updates of the system and its libraries
Emergency Response Plan
How we respond to security incidents:
🚨 When an incident is detected:
- Notify the security team immediately
- Isolate the problem and limit the damage
- Analyse the incident and find a solution
- Notify the affected users
- Restore the system and strengthen security measures
- Prepare a full report and preventive measures
📞 Report a security incident: info@educationcrm.uz or +998 91 622 25 85
User Responsibility
Users must follow these security measures:
- Keep credentials secret: your password and login must not be shared with anyone
- Choose a strong password: at least 8 characters — letters, numbers and special characters
- Report suspicious activity: tell us about unusual sign-ins or changes
- Be careful on shared devices: remember to log out
- Follow updates: pay attention to security notices
Security Contact
If you have a security problem or question, tell us right away:
Phone: +998 91 622 25 85
Email: info@educationcrm.uz
Website: educationcrm.uz
Version: 1.0 · educationcrm.uz