How We Keep Your Data Safe

Every connection to Ruzuku is encrypted using TLS/SSL — the same technology banks use to protect online transactions. Whether you're building a course, uploading content, or your students are logging in, the data moving between their browser and our servers is encrypted in transit.

Data stored on our servers is also encrypted at rest. This means that even in the unlikely event of unauthorized physical access to our infrastructure, your information remains unreadable without the proper encryption keys.

Access to Ruzuku's production systems is restricted to authorized team members who need it for their specific role. We follow the principle of least privilege — people only get access to the systems and data they need to do their jobs, nothing more.

Multi-factor authentication is required for infrastructure access. All team members undergo background checks, and access rights are reviewed regularly to ensure they remain appropriate.

Your courses and data are backed up automatically on a regular schedule. Backups are stored in a separate environment from production, so even a major infrastructure issue wouldn't affect both your live data and its backups simultaneously.

We maintain documented disaster recovery procedures and test them to ensure we can restore service promptly. Our goal is to make sure your courses and student data are always recoverable.

We maintain a formal incident response plan that outlines clear responsibilities, escalation procedures, and communication protocols. If a security event occurs, our team follows established procedures to contain, investigate, and resolve the issue as quickly as possible.

We also monitor for incidents and analyze any that occur to improve our defenses. If a security incident ever affects your data, we'll notify you promptly with clear information about what happened and what steps we're taking.