Compliance & Technical Ledger

Technical Resources & Compliance Guidelines

Cohort is built upon strict legal, statutory, and database security baselines. Access compliance checklists, grievance escalation structures, and integration parameters.

DPDP Act, 2023 Compliance Checklist

Children's Data Protection Safeguards

Enforce strict DPDP Act (2023) guidelines. Behavioral monitoring, student profiling, and targeted advertising directed at minor students (under 18) are physically blocked at the database schema level.

Verifiable Parental Consent Tracking

Built-in digital signature and SMS verification workflows to record and audit verifiable parental/guardian consent before any student processing occurs.

India Data Residency Guarantee

Data processing, backups, logs, and database structures are hosted strictly within the ap-south-1 (Mumbai) AWS region. Cross-border transfers are mathematically restricted by network rules.

Immutable Transactional Records

Shadow triggers automate compliant auditing logs. Soft-deletes prevent physical records truncation, satisfying electronic evidence guidelines under Section 65B of the Indian Evidence Act, 1872.

Grievance Redressal Officer

Under India's Digital Personal Data Protection (DPDP) Act, 2023, users have the right to request redressal of data processing grievances.

Officer: Grievance Redressal Officer, GridCohort
Dispute Jurisdiction: Vaniyambadi, Tirupattur District, Tamil Nadu, India
Escalation Path: If a user grievance remains unresolved for more than 30 days or is handled unsatisfactorily, the complainant possesses the statutory right to escalate the dispute directly to the Data Protection Board of India (DPBI).

Developer API & Client Resolution

Cohort client applications resolve target databases dynamically using an onboarding client. Our central coordinator routes requests using connection coordinates.

GET/api/tenant/resolve
{
  "tenant_id": "893c52a0-4ff6-4ad2-a5f1-5bbef89de78a",
  "campus_slug": "vaniyambadi-academy",
  "connection": {
    "url": "https://uiefpnswxvyvlzvejzxv.supabase.co",
    "region": "ap-south-1"
  }
}

Legal Policies & Synchronization Notice

All core legal documents, including our Terms of Service, Privacy Policy, and Data Residency Notices, are centralized inside our package registry packages/supabase/legal.ts. This guarantees that compliance policies remain identical across all mobile applications, web platforms, and student dashboards, preventing local version conflicts.