Security

Overview

Decimal implements industry-standard security measures to protect your school's data. This page outlines the security features and best practices for maintaining a secure environment.

Authentication

• Email/password authentication: Secure password-based login with bcrypt hashing
• Google OAuth: Sign in with your Google account for convenience
• Turnstile captcha: Protection against brute force attacks
• Session management: Secure session tokens with automatic expiration
• Two-factor authentication: Optional 2FA via authenticator apps

Data protection

• Encryption in transit: All data is transmitted over HTTPS/TLS
• Encryption at rest: Database encryption via Supabase
• Row-Level Security: Database-level access control ensures users can only see their permitted data
• Regular backups: Automated daily backups with point-in-time recovery

Best practices

• Use strong, unique passwords (at least 12 characters)
• Enable two-factor authentication for all admin accounts
• Regularly review active sessions and revoke unused ones
• Keep staff accounts up to date — deactivate accounts for departed staff promptly
• Limit super admin access to only those who need it