Our assistant proposes; you decide. Everything it suggests is approved by a human, reversible, and auditable — enforced by the software itself, not just promised in a policy.
The confirm step is the product. Nothing touches your records until you tap Confirm.
These aren’t settings or promises — they’re how the software is built. Each one is enforced on every request.
The assistant can suggest adding a student or a fee, but it only proposes. Your tap on Confirm is what actually writes anything.
Human-in-the-loopThe assistant can add and update — with your confirmation — but deletion is blocked entirely. Removing records is always a deliberate human action.
No AI deletes, everEvery bulk import you confirm can be undone for 30 days — created records are archived and edited ones restored to their exact prior values.
30-day revertYour team roles are re-verified the moment you confirm an action — not only at the database. A teacher can’t be nudged into an admin-only change.
Role-gatedPause the assistant’s ability to make any change instantly — for a single school or across everything — while read-only answers keep working.
Instant pauseThe assistant reads your records on your own device and shares only small summaries with the AI model — never a copy of your full database.
Minimum egressThe limits on what the assistant may do are held server-side and versioned. They can’t be edited or bypassed from a browser session.
Server-owned scopeFee totals, attendance rates and counts are computed from your actual data — never written by the AI. The model narrates; your data does the math.
No fabricated figuresEdHelfy’s architecture is built to support the principles behind India’s Digital Personal Data Protection Act: share the least data necessary with any AI model, keep a person in every decision, and make every change reversible. Student and family information is scoped so each account only ever reaches its own records.
A note on honesty: this describes how EdHelfy is built, not a certification we hold. We state the guarantees our software enforces — and we don’t claim compliance badges we haven’t earned.