Encryption
Encryption
Encryption turns data into a form that cannot be read without the right key. Oxonia is designed to use it whenever data moves and wherever it is stored.
About this page
Last updated: 10 October 2026.
This page describes how the Oxonia platform is designed to work. It is not a certification or an audit report. Our contractual commitments are in each university's order form, the data processing agreement and the service level agreement.
Data in transit
When a student opens a study pack, a lecturer uploads a recording or a Council member downloads a board pack, data travels across networks. The platform is designed to encrypt this traffic using current, widely used transport encryption. Connections to the website and products use HTTPS. Security teams can ask security@oxonia.ai for current protocol and cipher settings.
Data at rest
Data stored by Oxonia, including recordings, transcripts, exam scripts, marks, minutes and payment records, is designed to be encrypted while stored. This also applies to backups. Security teams can ask security@oxonia.ai for details of the methods and key management.
Secrets and keys
Some data is especially sensitive because it unlocks other systems. Examples are the AI keys a university connects and the details used to link sign-in and learning platforms. These are designed to be stored as secrets, shown only in part after they are saved, and changed only by admins with the right role. See Bring your own AI keys and Access controls and 2FA.
Offline devices
Some Oxonia features work offline, such as scanning exam booklets in Oxonia Mark and reading board packs in the Senate boardroom app. Data held on the device while offline is designed to be protected and to sync when the device is back online. Universities should also apply their own device policies, such as screen locks, to phones and tablets used for exams and governance. See Mobile apps.
Payments
Card and bank payments in Oxonia Wallet are handled through payment providers such as Paystack. Full card details are designed not to be stored by Oxonia.
What encryption does not do
Encryption protects data from people who should not have it. It does not decide who should. That is the job of roles and permissions. A person with the right role sees their records in plain form. See Roles and permissions and Audit logs.
Questions
Security teams can ask for more detail when you book a demo. Any independent assessment of our encryption will be listed on the trust centre once completed.
Related