Malaysia PDPA 2010 compliance layer.
TahfizFlow is designed to support responsible processing of personal data under Malaysia Personal Data Protection Act 2010 for commercial service use.
Last updated: 12 Jul 2026
Notice and choice
Users are informed when personal data is collected and consent is requested on public forms that collect personal details.
Purpose limitation
Data is processed for education management, tenant administration, support, reporting, communication, billing and approved integration use.
Disclosure control
Institution data is separated by tenant and institution. Parent, student, teacher and admin access is limited by role and relationship.
Security principle
The platform includes tenant-scoped queries, protected routes, audit logs, secure storage patterns and optional provider adapters for external services.
WhatsApp and payment integrations
WhatsApp and payment integrations are provider-ready but optional. If enabled, institutions should inform users that selected data may be processed by approved external processors.
Version
pdpa-v1 - 2026