Security Architecture
How we safeguard learner accounts, research workflows, and infrastructure reliability across the Shakalya International ecosystem.
Last Updated: November 2026
Security Architecture
Shakalya International protects user identity, academic data, and AI pipelines through layered isolation and strict transport encryption.
Security is engineered directly into our application layer—from zero-trust token validation on account routes to scoped API boundaries.
Encryption & Transport Controls
All public traffic across shakalyainternational.in and product subdomains is enforced over HTTPS (TLS 1.2+ / TLS 1.3) with HSTS security headers.
Authentication sessions rely on Firebase Identity infrastructure with modern cryptographic signing and origin verification.
Access Control & Least Privilege
Internal engineering access follows strict least-privilege permissions, auditability, and separation of production keys from open-source repositories.
- Automated dependency hygiene and static analysis before deployment.
- Strict separation between user workspaces and experimental sandboxes in SI Tech Labs.
- No third-party resale of private student or applicant records.
Responsible Vulnerability Disclosure
If you discover a potential security issue or vulnerability anywhere in our ecosystem, please report it responsibly before public disclosure.
Send reproducible technical steps to info@shakalyainternational.in with subject '[Security Disclosure]', and our engineering team will prioritize triage promptly.