🎓 K-12 LMS · AI Tutors · DPDP by Design
ScholarSync
The school operating system, rebuilt for the AI era — management, teaching, and guardrailed AI tutoring for Indian K-12 schools, in one multi-tenant platform.
Industry
K-12 Education · EdTech SaaS · India (CBSE / ICSE)
Scope
Multi-tenant platform, 5-role RBAC, curriculum & gradebook, assignments & submissions, guardrailed AI tutors, communications hub, attendance & operations, OneRoster rostering, notification engine
Timeline
2025–2026
Stack
Next.js 15 · NestJS · PostgreSQL 16 + pgvector · Prisma · Redis + BullMQ · MinIO · Docker
ScholarSynccollapsesthefour-to-fivedisconnectedtoolsaschooljuggles—SIS,LMS,messagingapp,gradebookspreadsheets,andanungovernedAIchatbot—intoonegovernedplatformwhereeveryroleseesexactlywhattheyshould,andtheAIisasupervisedtutor,notahomeworkvendingmachine.
One multi-tenant backend — five roles, two modes, every query org-scoped.
The Problem
One school. Five disconnected systems. Zero AI governance.
The tools ran, but nothing connected — and the AI ran with no guardrails at all.
Fragmented tooling
Attendance in one app, grades in a spreadsheet, homework on WhatsApp — nothing talks to anything.
Teacher admin overload
Planning, grading, reporting, and parent messaging eat the hours meant for teaching.
Ungoverned AI
Students already use chatbots that hand over answers — no visibility, no guardrails, no age gates.
Parents in the dark
Progress surfaces once a term as a paper report card; day-to-day learning is invisible.
A compliance clock
India's DPDP Act puts hard obligations on children's data, and legacy school software wasn't built for it.
The Solution
Manage.Teach.Learn.
ScholarSync runs on one backend with two faces — an admin management view for running the school and a classroom view for living in it — with every query scoped to the school’s own tenant. Five roles, ten modules, and a guardrailed AI layer, all speaking to one source of truth.
School Management Suite
Org onboarding, OneRoster CSV rostering with diff-preview imports, terms, courses and sections, attendance, timetable, calendar, announcements, and a 30+ page admin panel.
Classroom & Assessment Engine
Curriculum-aligned unit planning, Tiptap-rich assignments with file submissions and late-policy automation, rubric-based grading, a live gradebook, portfolios, and progress reports.
Guardrailed AI Layer
Teacher-configured Socratic AI tutors with per-school toggles, grade-level gates, helpfulness dials, and prompt-injection defense via a proxy layer — plus AI assist for planning, grading first-passes, and report comments.
78
entities modeled
172
user stories
300-cell
RBAC matrix
45
notification events
Five roles across Superadmin, Admin, Teacher, Student and Parent; an architecture designed around DPDP principles; OneRoster interoperability; and org-scoped tenancy enforced on every query.
Five roles. Ten modules. One governed platform.
See the guardrails in action→Approach
Real Pedagogy Real Guardrails Real Craft
Compliance and safety designed in from the first commit — not bolted on later.
Secondary Home — 2026–27
Sunrise International School
TeacherFaculty accountResource Library
Ready-to-use teaching resources
Lesson plans, worksheets, presentations, rubrics and more.
Biology
20 resources
Math
35 resources
Assessment
15 resources
English
28 resources
My Classes
Impact
10 Modules, One Backend
From OneRoster rostering to report cards, ten modules run on a single multi-tenant backend.
647 UI States Mapped
Reverse-engineered across 21 phases into an implementation-ready architecture.
5 Roles, One Source of Truth
A 300-cell RBAC matrix enforced with section-scoped guards — every role sees exactly what it should.
DPDP Principles by Design
Tenant isolation, audit trails, and data-minimization patterns ahead of the 2027 enforcement deadline.
The Outcome
Safety and scale, designed in from day one.
Multi-tenancy, role guards, and a hardened AI proxy — engineered in from the first release, not retrofitted.
Every student, safe by default.
Org-scoping runs on every query, role guards gate every view, and AI-tutor traffic passes through a hardened proxy before any model sees a student.
- Org-scoped multi-tenancy on every query — no cross-school data paths
- httpOnly-cookie auth with role guards and section-scoped teacher permissions
- AI-tutor traffic routed through a hardened, prompt-injection-defended proxy
Review
From the Engagement
A solo-led, specification-first build: a complete design package — scope freeze, a 78-table data model, an RBAC matrix, a notification map, PRD, design system and architecture docs — executed phase-by-phase with manual verification gates and independent AI code audits at each delivery.
ScholarSync
Multi-Tenant K-12 Platform · 2026
ScholarSync
Governed by design
From a frozen scope and a 78-entity data model to a 300-cell RBAC matrix and a 45-event notification engine, ScholarSync was architected — and verified phase-by-phase — to be multi-tenant, guardrailed, and designed around DPDP principles from the first release.
Engineering outcomes
