Security

• TLS 1.2+ everywhere
• AES-256 at rest
• 2FA available for admins, bursars, and teachers
• Idle timeout at 15 minutes (configurable)
• Row-Level Security on every tenant table
• Audit log for privileged actions

Report vulnerabilities to security@eduwallet.ug.