Security by design

Every scan verified. Every threat blocked.

Security isn't a feature bolted on after the fact. It's the reason GeoMark exists. Multiple independent verification layers run on every check-in — and if any one fails, attendance is not recorded.

Independent checks
<1s
Verification time
0
Shared secrets stored
100%
Audit coverage

Fraud prevention

Every known cheat method, handled.

GeoMark was built knowing exactly how students try to game attendance. Each of these is blocked automatically — no manual intervention needed.

Screenshot sharing

A student photographs the QR code and sends it to an absent classmate.

Blocked automatically

GPS spoofing

A student uses a fake location app to appear inside the classroom.

Detected and rejected

Account sharing

One student checks in using another student's credentials on their device.

Flagged for admin review

Replaying old codes

A student saves a QR code from a previous session and submits it later.

Rejected immediately
All fraud events are logged and surfaced in the admin security feed — so nothing happens silently.

Architecture

Three pillars

Verification. Protection. Accountability.

Multi-layer verification

  • Every check-in passes multiple independent tests before being recorded
  • Single-use QR tokens that cannot be reused or shared
  • Location verified against the registered classroom on every scan
  • Device identity checked to catch account sharing
  • Anomaly detection flags impossible or suspicious patterns

Data protection

  • Passwords stored using industry-standard one-way hashing
  • Sessions secured against common web-based attacks
  • All traffic encrypted in transit — end to end
  • Brute-force and abuse protection on every sensitive endpoint
  • Personal data collected only where operationally necessary

Audit & compliance

  • Every check-in cryptographically logged and tamper-evident
  • Real-time security event feed with severity levels
  • NDPR 2019 & NDPA 2023 aligned data handling
  • Export-ready audit trail for regulatory inspection

Compliance

Built for Nigerian institutions

GeoMark was built from the ground up to align with Nigeria's data protection laws. Every data collection, retention, and sharing decision is anchored in NDPR 2019 and NDPA 2023.

NDPR 2019 data minimisation principle
NDPA 2023 data subject rights (access, erasure, portability)
Explicit consent obtained at registration
Location data retained only for the session
Audit log available for regulatory inspection
Data processor agreements with all sub-processors
NDPR 2019

Nigeria Data Protection Regulation

NDPA 2023

Nigeria Data Protection Act

Encrypted

All traffic protected in transit

OWASP

Top-10 mitigations applied

Found something?

If you believe you've discovered a security issue, please contact us privately before disclosing publicly. We respond to all genuine reports within 48 hours.

Report a vulnerability

Ready to deploy?

Security you can stand behind

Every university that onboards GeoMark gets a full security briefing, a walkthrough of the audit log, and direct access to the team for any questions.

The difference

What a real roll-call can't do

Paper and spreadsheets record a name. GeoMark records a verified, located, tamper-proof check-in.

CapabilityGeoMarkManual roll-callSign-in sheet / spreadsheet
Records a full class in seconds
Stops proxy & buddy check-ins
Proves physical presence (GPS geofence)
Face verification
Rotating anti-share code
Live dashboard & analytics
Fraud & anomaly detection
Tamper-evident audit trail
Parent visibility
No extra hardware