The rules of the road.
Three documents in one place — written in plain English first, then the legally binding text. No fine print, no dark patterns, no surprises buried at the bottom.
Encrypted by default
AES-256-GCM at rest, TLS in transit. Messages and anonymous reports use end-to-end encryption.
Tenant isolation
Every row is school-scoped. Postgres row-level security blocks cross-tenant reads even on a code mistake.
Data stays in Nepal
Default deployments use NPR-region storage and backups. Cross-border transfer is opt-in.
Right to delete
Export or delete tenant data on demand. Backups purged within 14 days unless contractually retained.
AI stays local
Saraswati AI runs on your school's own server. No student data ever leaves the tenant.
Audit-logged access
Every sensitive read and write is captured in an append-only audit log, scoped to your school.
The three documents
Each document carries the same version stamp. We bump them together when any of the three changes and notify schools 30 days before new terms take effect.
What we promise, we put in the contract.
The plain-English summary at the top of each section is the same commitment as the legal paragraph that follows — we don't keep two different versions of the truth. If anything in the summary contradicts the body, write to us and we'll fix the body to match.
These pages also serve as the canonical changelog. Every material edit gets a new version number, a dated entry in the footer, and a 30-day in-product notice to every Subscriber before it takes effect.
Need a signed counterpart?
Enterprise customers get a counter-signed PDF with the same text plus an Order Form addendum. Email legal to request one.
© 2026 Neural Sherpa · Saraswati EDU · Hetauda, Nepal · हेटौडा, नेपाल.

