Nawras Education

Security

Architecture you can inspect

We describe how the platform is built. We do not display ISO, SOC or uptime badges this site has not been authorised to claim.

Separate database per company tenant

Pro and Enterprise workspaces do not share a school database with the Free community. Isolation is the default for a company tenant.

Keycloak identity per company

Company tenants get their own identity realm. Microsoft and Google sign-in are available on the product login, not as a shortcut that skips OTP on this website.

Hosted on Azure

Application, data and API Management sit on Microsoft Azure. Public catalogue reads go through APIM with a School-Code header.

Encrypted in transit and at rest

TLS on public endpoints. Disk encryption on Azure-managed data stores. Management APIs from this website use a server-side API key — browsers never hold it.

Bilingual operation

Arabic and English are first-class, including RTL on this site. That is an operations requirement for regional schools, not a marketing toggle.

Security questionnaire for a bid?

Send it through Contact sales. Enterprise reviews are handled with the account team, not a generic PDF on this site.