Data Processing Addendum

This addendum applies where Ilmora processes personal data on behalf of an institute. The institute is the controller; Ilmora is the processor.

Subject matter: provision of the Ilmora school management platform.

Categories of data subject: students, guardians, teaching and non-teaching staff, applicants, visitors, and boarders from other institutes where a school houses them.

Categories of personal data: identity and contact details, guardian relationships, attendance, academic results, fee and payment records, payroll and employment records, disciplinary records, health notes recorded in an infirmary log, documents uploaded by the institute, and biometric or card identifiers where the institute chooses to use them.

• Process personal data only on the institute's documented instructions
• Keep the data confidential and limit access to staff who need it
• Apply the security measures described below
• Assist the institute in responding to data subject requests
• Notify the institute without undue delay on becoming aware of a personal data breach
• Delete or return the data at the end of the agreement

• Tenant isolation enforced in the application and by database row-level security
• Role-based access control, per-campus grants and a full audit log
• Append-only financial records; corrections are dated reversals
• Encryption in transit; restricted and logged production access
• Regular backups, with restoration tested

We use a small number of infrastructure and communication providers. A current list is available on request from help@ilmora.cloud, and we give notice before adding one that processes customer personal data.

Your institute's own SMS and email gateways are not our sub-processors — you connect your own, so messages to your parents leave under your sender identity and your contract with that provider.

Where data is processed outside Pakistan by an infrastructure provider, appropriate safeguards are applied. Tell us if your institute requires data residency and we will confirm what is possible.

On termination, and after the retention window agreed with the institute, personal data is deleted from live systems and expires from backups on the backup rotation.

help@ilmora.cloud