Security and trust at Focus Realm.

Cloud hosting

Our products are built on Google Cloud and Firebase, on managed infrastructure maintained by Google.

Encryption in transit

All traffic is served over HTTPS. This site sends HSTS on every response, so browsers never fall back to plain HTTP.

Encryption at rest

Data stored in Google Cloud and Firebase is encrypted at rest by the platform by default.

Role-based access

Each user sees what their role needs: staff, managers and administrators in Mise; students, teachers and administrators in education.

Activity record

Work done in the products is timestamped and attributed to a person, so an institution can review what happened and when.

Least privilege internally

Production access is limited to the engineers who need it to run the service.

DPDP Act, 2023

Personal data is handled in line with India's Digital Personal Data Protection Act, and with UK and EU GDPR where they apply.

Your data stays yours

We process institutional data to run the service, not to sell it or to train third-party models.

Retention and deletion

Data can be exported or deleted at the end of an engagement, on request from the institution.

Hardened headers

HSTS, nosniff, frame denial, a strict referrer policy and a locked-down permissions policy on every response.

Abuse protection

Public endpoints validate input, cap payload size and are rate limited.

Dependency hygiene

Dependencies are kept current, and security updates are applied promptly.