VSMS is a unified, AES-256 encrypted school + hostel SaaS designed for welfare trusts at national scale — up to 1 crore students on a single tenant. Admissions, fees, progress, donor portal & certificates — encrypted, audited, role-isolated.

Status pinned to Draft until medical certificate uploads — enforced at the API and DB layer. No workaround.
Color-coded alerts: Green <75%, Amber <90%, Red ≥90%. Per-hostel scope, super-admin gets the heatmap.
Sponsored students only. Monthly photo gallery, 4-dimension progress, marksheets, 80G receipts — donor isolation enforced via JOIN.
Teacher enters subject marks → Admin reviews → Published to donor. Teachers cannot see other subjects.
VS/TC/2026/0001, VS/CC/2026/0001 — generated as PDF, stored privately in object storage with signed access.
End-of-year orchestration. Audit trail captures every transition.
Every login, admission, fee, transfer, certificate — captured immutably with actor, role, IP.
Every PII column — Aadhar, address, phone, guardian name — is sealed with AES-256-GCM before it ever touches MongoDB. In transit, every byte rides TLS 1.2+. Roles are enforced at the dependency layer of every endpoint.
Sensitive fields wrapped with 96-bit nonce + 128-bit auth tag. Stored as base64(nonce||ct||tag).
Platform-managed certificates, automatic renewal.
Cost factor 12, per-user salt. Plaintext never persisted.
Hostel/School admins scoped by ID; teachers locked to their subject; donors locked to assignment.
HttpOnly + Secure cookies, 12-hour TTL, signed HS256.
Login, admission, fee, transfer, certificate — actor, role, IP, timestamp.

VSMS is engineered for horizontal scale: stateless FastAPI workers, MongoDB sharding on tenant + student keys, async I/O end-to-end, and Emergent object storage for files. Read replicas, regional caches, and CDN asset delivery keep the donor portal snappy whether a trust runs one hostel or five thousand.
Owns hostels, schools, users, audit logs.
Single hostel scope: admissions, fees, progress, photos.
Single school scope: marksheets, fees, promotions.
Subject-scoped — marks for own subject only.
Assignment-scoped — sponsored students only.
Test credentials are listed below. Every interaction is encrypted and audited.