EncryptEd is the official academic management platform of the Philippine Academy of Sakya. All personal data is handled in strict compliance with Republic Act No. 10173 (Data Privacy Act of 2012).
Security Measures
- bcrypt (cost 12) — Passwords are hashed and never stored in plain text.
- AES-256 encryption — All personally identifiable information is encrypted at rest.
- Brute-force protection — Accounts lock for 10 minutes after 5 failed attempts.
- SHA-256 audit logs — Sensitive actions are tamper-evidently recorded.
- Session security — HttpOnly, SameSite cookies with 30-minute idle expiry.
Data Privacy Act (RA 10173)
- Data Minimization — Only operationally necessary data is collected.
- Informed Consent — Explicit consent is obtained during the admission process.
- Right of Access & Rectification — Users may view and request correction of their records.
- Right to Erasure — Data deletion requests may be submitted to the Data Protection Officer.
For data privacy concerns, contact the Data Protection Officer through the School Registrar's Office.