FretBox Logo
Home/Security & Compliance

Security & compliance

Your university’s data.Protected by FretBox.
Controlled by you.

We take data security and compliance seriously. Our certifications, annual security testing and everyday safeguards back that commitment.

See the evidence

Evidence first

Certified systems. Evidence you can see.

Annual VAPT

Independent security testing every year.

Security assessmentReview summary

University-controlled access

Your data. Your university decides who sees it.

Role-based permissions, controlled by you.

Your university defines access for its users. Wardens, security, finance and other teams receive permissions according to their assigned responsibilities.

FretBox staff have no access to your data.

Your institution’s information remains under university control. Access belongs to the users your university authorises.

Protection in the way we operate

Safeguards that work every day.

Encrypted data

University and student data is encrypted in transit and at rest—protected as it moves through FretBox and while it is stored.

Hosted in India

Your hostel operations run on cloud infrastructure in India, where university and student data is hosted.

Daily & iterative backups

We take daily and iterative backups, preserving recoverable copies of your institution’s data.

Full audit trail

Changes are recorded so your institution can trace what changed, who made the change and when.

Supporting your institutional evaluation

Bring the evidenceinto your IT review.

Review the VAPT summary, data-processing arrangements and architecture with your team. Share your university’s review requirements so we can provide the relevant supporting material.

Request supporting documents

Prepare an email request to review and send. Availability and any NDA requirements are confirmed by the team.

Privacy Policy Terms of Service

  • VAPT executive summary

    Assessment scope, findings and remediation status.

  • Data Processing Agreement

    Institutional responsibilities and processing arrangements.

  • Architecture & data flows

    Hosting, integrations and relevant sub-processors.

  • Institutional security questionnaire

    Your IT team’s questions and available supporting evidence.