Security & trust
School-owned payment keys, clear role walls, and full data ownership. We built trust into the product.
Your payment account, your money
School-owned payment account
You connect your own payment gateway. Parent MoMo or bank transfer payments go direct to your account. We never touch your funds.
Keys encrypted at rest
We encrypt your payment gateway keys with AES-256-GCM before storing. Only your school's payment flows can decrypt them.
You can revoke anytime
Rotate or revoke your payment keys in your provider dashboard. TavlaHub stops working until you update them. Full control.
No vendor lock-in
Switch away from TavlaHub? Your payment account stays yours. All transaction history remains with your payment provider.
Payment flow
Parent taps "Pay with MoMo"
TavlaHub calls your payment gateway
Funds hit your bank account
TavlaHub updates ledger & receipt
We coordinate. Your payment gateway collects. You own the money.
Role walls that work
Teachers can't see fees. Bursars can't edit grades. No accidents, no confusion.
| Role | Fees | Grades | Students | Users | Settings |
|---|---|---|---|---|---|
| Owner | ✓ Full | ✓ Full | ✓ Full | ✓ Manage | ✓ Full |
| Admin | ✓ Full | ✓ Full | ✓ Full | ✓ Manage | ✓ Most |
| Teacher | ✗ None | ✓ Full | ✓ Read | ✗ None | ✗ None |
| Bursar | ✓ Full | ✗ None | ✓ Read | ✗ None | ✗ None |
| Admissions | ✗ None | ✗ None | ✓ Full | ✗ None | ✗ None |
Enforced at database level
Role checks happen in Row-Level Security (RLS) policies on Supabase. Even if someone bypassed the UI, the database blocks unauthorized access. No shortcuts.
Your data is yours
CSV export anytime
Download all your students, fees, payments, grades, and report cards in CSV format. No lock-in.
Multi-tenant isolation
Every query filters by your school_id. One school cannot see another school's data. Enforced in RLS.
HTTPS everywhere
All traffic is encrypted in transit. No plain HTTP. TLS 1.3 for staff dashboard and parent app.
Built on trust
Transparent pricing
Published annual rates with no hidden fees or contact-us pricing games.
Your data, your keys
School-owned payment accounts, full CSV export, and no vendor lock-in.
Real support
Email and WhatsApp support during business hours. Real humans in Accra.
Questions about security?
Request a walkthrough and we'll answer your questions about data ownership, payment keys, and role walls.