Are you a student?
Six pillars of SochPlay security
Encryption everywhere
All traffic is HTTPS/TLS 1.3. Data at rest is encrypted with AES-256 on managed cloud storage.
Strong authentication
Email + password and Google sign-in with hashed credentials. Optional 2FA for hosts.
Row-level security
Every database table enforces row-level rules so students only see their own data.
Privacy by default
Students join with a PIN — no email, no tracking. We only collect what's needed to play.
Reliable hosting
Enterprise-grade infrastructure with daily backups and 99.9% uptime targets.
GDPR & FERPA aware
Data export and deletion on request. Designed for school environments and minor privacy.
Engineering practices
- Code review on every change
- Automated dependency scanning
- Quarterly third-party penetration tests
- Bug bounty program for critical issues
- Encrypted, geo-redundant daily backups
- Principle-of-least-privilege access for all staff
Compliance
We align with global standards for educational data protection.
GDPRFERPACOPPA-awareSOC 2 (in progress)ISO 27001 (in progress)
Need a Data Processing Agreement (DPA) or vendor questionnaire? Email us and we'll send one within 1 business day.