Guardian for Higher Education & EdTech — UK & IndiaNEW
From Lead to Alumni. One Platform. Every Institution. Every Stage.
Whether you run admissions on your Lead CRM (e.g. Merritto, LeadSquared), SAMARTH, UCAS, a basic web form, or purely on WhatsApp — Guardian unifies your entire student lifecycle from first enquiry to graduation, with compliance built in at every step.
🇬🇧 UCAS Universities🇬🇧 Non-UCAS FE & Apprenticeships
⚖ India DPDP Act 2023 — Enforcement Timeline
Education institutions are Data Fiduciaries. Enforcement is not optional — and it's coming.
Universities and colleges collecting student data (names, marks, biometric, financial) are classified as Data Fiduciaries. Hover the i icons for penalty details.
Aug 2023
Act Enacted
DPDP Act 2023 receives Presidential assent. India's first comprehensive data protection law.
2024
Rules Drafted
Draft DPDP Rules published. Public consultation. Consent Manager framework defined.
2025 ← Now
Rules Notified
DPDP Rules 2025 gazetted. Data Fiduciaries must begin compliance preparation.
i
What institutions must do NOW:
Map all student data flows · Appoint Data Protection Officer · Update privacy notices · Implement consent management · Prepare DSAR (data deletion) processes
Mid 2026
Enforcement Begins
Data Protection Board India (DPBI) becomes operational. Investigations and penalties begin.
i
Penalties from enforcement:
Failure to implement data security₹250 Cr
Failure to notify breach in time₹200 Cr
Non-compliance with child data rules₹200 Cr
Non-compliance with DPBI orders₹150 Cr
Other violations₹50 Cr
Late 2026
Full Compliance Required
All Data Fiduciaries must be fully compliant. No grace period extensions expected.
i
Guardian makes you compliant today:
Student PII encrypted at ingestion · 1-click DSAR deletion · Automated breach detection · Full audit trail · Role-based access — all by architecture, not manual process.
⚖ UK GDPR + EU AI Act — Compliance Timeline for UK HEIs
Education is explicitly listed as High-Risk AI under EU AI Act Annex III. Human oversight is legally mandatory.
UK universities using AI for admissions scoring, student assessment, or applicant triage must comply with both UK GDPR and EU AI Act obligations. Hover the i icons for details.
May 2018 / Jan 2021
UK GDPR Active
GDPR adopted as UK law. ICO begins active enforcement. Student data fully in scope.
i
UK GDPR Penalties — Already Active:
Higher tier (serious breach)£17.5m or 4% turnover
Lower tier (procedural breach)£8.7m or 2% turnover
EU AI Act published. Phased implementation begins. UK HEIs with EU operations must take note.
Feb 2025
GPAI Model Rules Apply
General-Purpose AI model obligations active. Affects all AI vendors your institution uses.
Aug 2025 ← Now
High-Risk AI Rules Active
Education listed under Annex III. AI for admissions & assessment = High-Risk. Human oversight mandatory.
i
What UK HEIs must do NOW (Article 14):
Implement human oversight on all AI-assisted admissions decisions · Maintain audit logs of AI outputs · Ensure staff can override AI recommendations · Conduct conformity assessments for High-Risk AI systems
2026
Full EU AI Act Enforcement
Full enforcement for all remaining provisions. ICO expanded AI oversight framework active.
i
EU AI Act Penalties:
Prohibited AI practices€35m or 7% turnover
High-Risk AI non-compliance€15m or 3% turnover
Incorrect information to regulator€7.5m or 1% turnover
Guardian's HITL architecture satisfies Article 14 requirements — human oversight built in, not bolted on.
India EdTech: Select Your Institution Type
Every Indian institution operates differently. Select yours below to see exactly how Guardian fits your existing systems, team structure, and compliance needs.
✓
🏛️
TYPE A — Full-Stack Private University
Website + Lead CRM + Custom ERP
Uses a Lead CRM (e.g. Merritto, LeadSquared) for admissions + a private ERP for academic operations. The standard setup for established private universities.
✓
🇮🇳
TYPE B — SAMARTH-Connected
Government / Aided — SAMARTH eGov Suite
Central and state universities integrated with the Government's SAMARTH eGov platform. Real-time application streaming via webhook. IITs, IIMs, NITs, state institutions.
✓
🌐
TYPE C — Mid-Tier Private College
Basic Website + WhatsApp (No ERP)
Has a website with an enquiry form and a WhatsApp Business number. No CRM or ERP. Staff manually manage admissions via calls, WhatsApp messages, and spreadsheets.
✓
📱
TYPE D — WhatsApp-Only Campus
No Website · No CRM · WhatsApp Only
Entire admissions, communication, and document collection runs through a single WhatsApp Business number. Common in Tier-2/3 private colleges and vocational institutes.
Type A — Full-Stack Private University (Lead CRM + ERP model)
Three Siloed Systems. Zero Automation Between Them.
Leading private universities have a Lead CRM for admissions marketing and a custom ERP for academic operations but these systems don't talk to each other. Every student enrollment involves manual data re-entry, creating delays and errors. And WhatsApp messages from hundreds of students are handled entirely manually unstructured, untracked, and non-compliant with the DPDP Act.
The Full Student Lifecycle — Where Guardian Activates
📣
Lead Generation
✕ Without Guardian
Ad campaigns, fairs, social media → web form submitted → lead added to CRM manually by staff. Enquiries overnight go unanswered.
✓ With Guardian
Human-BOT captures intent 24/7 on website and WhatsApp. AI qualifies and scores leads before CRM entry. No lead goes cold overnight.
→
📋
Admissions & Counselling
✕ Without Guardian
Tele-marketing team makes 15–20 calls per lead. Document chasing by phone. WhatsApp chaos 200+ untracked daily messages.
✓ With Guardian
HAIYSAI automates follow-up sequences via WhatsApp and email. Documents collected inside chat. Only hot prospects reach the counsellors.
→
🔗
Enrollment Handoff
✕ Without Guardian
Enrolled student data manually re-keyed from Lead CRM into university ERP. Hours of admin time. Errors and batch delays every cycle.
✓ With Guardian
NEXUS automates CRM → ERP data sync in real time. Zero manual re-entry. Zero errors. Student provisioned in ERP instantly on enrollment confirmation.
→
⚙️
Academic Operations
✕ Without Guardian
Faculty buried in WhatsApp queries about schedules and marks. Finance manually chasing fee defaulters. No live data for VC or management.
✓ With Guardian
Human-BOT handles 80% of student queries. Fee reminders automated (3-stage). Live VC dashboard with enrolment, fees, attendance no manual reports.
→
🎓
Alumni & Placement
✕ Without Guardian
Placement drives coordinated via email threads. Alumni relations patchy and manual. No pipeline visibility for placement teams.
✓ With Guardian
HAIYSAI orchestrates drives from eligibility filter to interview slots. Human-BOT maintains alumni engagement. Placement rate tracked in live dashboard.
⚠ The Current Reality — Private University Pain Points
📞 Tele-marketing team makes 15–20 calls per prospect same questions, manual CRM tracking
🔄 Enrolled student data manually re-entered from Lead CRM into ERP errors, hours of admin time per batch
📱 Students WhatsApp counsellors directly 200+ unstructured messages daily, no record, no DPDP Act compliance
📊 Senior management requests KPI reports Finance/Admin spend days pulling data from ERP manually
💸 Fee defaulters chased manually by Finance no automated reminder, no dashboard visibility
🏢 Faculty overwhelmed with routine student queries about schedules, marks, and deadlines
✅ After Guardian What Changes
🤖 Human-BOT on website qualifies leads 24/7 only high-intent prospects escalated to tele-marketing team
🔗 NEXUS automates Lead CRM → ERP enrollment handoff real-time, zero manual re-entry, zero errors
📊 VC/management dashboard auto-populated from ERP via HAIYSAI no manual report generation
💸 Fee reminders automated 3-stage sequence, then Finance HITL gate for defaulters and waivers
🎓 Human-BOT handles all routine student queries faculty freed for actual teaching
How NEXUS Connects Your Existing Systems — Type A Private University
📣
Website / Ads
Lead capture forms
→
NEXUS webhook
📊
Lead CRM
Merritto / LeadSquared
→
NEXUS auto-sync
🏛️
University ERP
Academic operations
→
NEXUS WA hook
📱
WhatsApp
Student comms
NEXUS Integration Engine — Connects All 4 Sources. No Custom Code Required.
Your IT team provides API credentials from each system. NEXUS configures connectors, handles auth token refresh, and keeps data flowing bidirectionally in real time.
🤖
AI Lead Qualification
Human-BOT qualifies website and WhatsApp leads before CRM entry tele-team only handles hot prospects
⚡
Auto Enrollment Sync
CRM enrollment confirmation automatically provisions student in ERP no manual re-entry, instant, error-free
📊
Live VC Dashboard
ERP data surfaced to management in real time enrolment, fee collection, attendance, placement stats
Human-BOT answers 80% of routine student queries (timetables, exam schedules, attendance, library, marks) via WhatsApp freeing faculty for actual teaching.
📋
Exam & Results Workflows
HAIYSAI manages exam registration, hall ticket notifications, result announcements, and re-evaluation request workflows automated with HITL gate for exceptions.
🏢
Placement Drive Coordination
HAIYSAI orchestrates placement drives: company visit scheduling, student eligibility filtering, application collection, interview slot management from one workflow.
📊
Live VC / Management Dashboard
VC and Pro-VC see live enrolment numbers, fee collection status, placement statistics, and department-wise performance without waiting for Finance/Admin to compile reports.
🔒
DPDP Act Compliance — Automated
All student PII (marks, biometric, financial, personal) encrypted at ERP ingestion. DSAR requests fulfilled with 1-click. Audit trail maintained automatically.
Type B — SAMARTH-Connected (IITs, IIMs, State Universities)
Government Portal Data, Trapped in Silos. Guardian Unlocks It.
SAMARTH manages application intake — but the data doesn't automatically flow into internal systems. Staff export CSVs, re-enter data, manually verify marksheets and caste certificates, and manage waitlist rounds on spreadsheets. Guardian's NEXUS webhook connects directly to your SAMARTH endpoint, making data flow automatically and intelligently.
How the connection works: Your IT cell generates an API Key and Webhook URL from your institution's SAMARTH subdomain dashboard. NEXUS configures an active listener. Every new application or document upload on SAMARTH instantly streams to NEXUS → encrypted through Data Privacy Shield → routed to HAIYSAI for automated OCR verification, fraud detection, and eligibility scoring.
⚠ Before Guardian — SAMARTH Institutions
📥 SAMARTH data sits in portal — staff export CSVs and re-enter into internal systems manually
📋 Document verification (Class 10/12, caste certificates) done manually — high fraud risk at scale
🔄 Merit list round changes require manual re-processing — thousands of waitlisted candidates evaluated by hand
📞 Missing documents chased by phone — hours per applicant, counsellors overwhelmed
✅ After Guardian — SAMARTH Integration
⚡ NEXUS webhook streams every SAMARTH application in real-time — zero manual export
🔍 HAIYSAI runs automated OCR — altered marksheets flagged before they reach the registrar
🔄 Merit round changes trigger automatic re-scoring and WhatsApp notification to waitlisted candidates
💬 Missing document nudges sent via WhatsApp — student uploads inside the chat window directly
🔍
Document OCR & Fraud Detection
Every uploaded marksheet and certificate processed through automated OCR. Tampered documents flagged before reaching admissions staff — reducing fraud risk at scale.
🔄
Merit List Round Automation
Each merit round triggers automatic re-scoring. Waitlisted candidates re-evaluated, ranked, and notified in multiple Indian languages — without manual re-processing.
🌐
Multilingual Communication
Human-BOT communicates with applicants in Hindi, Tamil, Telugu, Bengali, Kannada, Marathi — from one knowledge base, without language-specific staff.
Type C — Mid-Tier Private College (Website + WhatsApp, No ERP)
A Website Form and a WhatsApp Number. Guardian Makes It a Full Admissions System.
Hundreds of private colleges have a website with an enquiry form and a WhatsApp Business number — but no CRM, no ERP, no analytics. Enquiries arrive from both channels, staff manually juggle them, leads go cold, and there's no visibility on conversion rates. NEXUS webhooks plug directly into your existing web form — no CRM migration required.
⚠ Current Reality — Mid-Tier Private College
📧 Website enquiries arrive as emails — staff forward manually, leads split across personal inboxes
📱 WhatsApp enquiries handled personally — no record, no tracking, no DPDP Act compliance
📊 No visibility on conversion rates — no one knows how many enquiries became enrolled students
🔕 Leads go cold overnight — prospect enrols elsewhere while waiting for morning response
✅ After Guardian — Webhook + WhatsApp
🔗 NEXUS webhook connects to your existing web form — no CRM migration, enquiries flow in automatically
🤖 Human-BOT responds to WhatsApp AND website enquiries instantly — 24/7 including midnight
📊 Live admissions dashboard: enquiries, documents received, conversions, pending applications
🔒 All data encrypted at ingestion — DPDP Act compliant by architecture, full audit trail
Type D — WhatsApp-Only Campus
No Website. No CRM. No ERP. One WhatsApp Number. Guardian Makes It Complete.
Many private colleges and vocational institutes have no website, no CRM, and no ERP. Their entire operation runs through a single WhatsApp Business number. Guardian converts that number into a fully automated, DPDP-compliant admissions system — zero additional infrastructure required.
Zero dependency on external systems: Guardian provisions a verified WhatsApp Business API account linked to the college's existing number. NEXUS treats inbound WhatsApp messages and media (PDFs, photos of marksheets) as the primary data payload. No website, no ERP, no CRM needed to go live.
📱
WhatsApp-Only Campus — Full Admissions Journey
From first message to admission confirmed — entirely inside WhatsApp
1
Student texts the college WhatsApp number. Human-BOT responds instantly in their language — English, Hindi, Tamil, Telugu — with course info and eligibility criteria. No wait time.
2
HAIYSAI launches a conversational application sequence. Asks the student to share their Class 10 and 12 marksheets as photos or PDFs directly inside WhatsApp. No portal login needed.
3
NEXUS captures the document media payload. HAIYSAI runs OCR to verify marks and check eligibility. Fraudulent or incomplete documents trigger automatic follow-up with specific missing items listed.
4
Human-BOT gate — HITL: Eligible applicants are summarised in the staff dashboard. Admissions coordinator taps Approve — or requests additional documents. AI cannot admit or reject without human sign-off.
5
Offer letter sent via WhatsApp. Fee payment link shared. Student confirms. Full admissions record in Guardian dashboard — DPDP Act compliant audit trail. No spreadsheet ever needed.
United Kingdom: UCAS-Connected & Non-UCAS Institutions
Guardian serves the full breadth of UK further and higher education from UCAS-integrated Russell Group universities to FE colleges and Degree Apprenticeship programmes managing applications through direct channels.
UCAS-Link API — Russell Group & Regional Universities
UCAS-Link OAuth2 Integration — No Custom Middleware. No Re-Keying.
How it connects: Your institution requests API credentials from the UCAS Halo Support Portal generating a Client ID, Client Secret, and OAuth2 endpoint. NEXUS handles all token refreshes, fetches applicant batches on schedule, encrypts all PII through Data Privacy Shield, and routes to HAIYSAI for personal statement triage and tariff point scoring.
⚠ Before Guardian — UCAS Universities
🗃️ UCAS data exported manually re-keyed into legacy Student Information Systems (Banner, SITS)
📚 Personal statement review and tariff scoring done manually bottleneck during January UCAS peak
HAIYSAI reads and scores personal statements against your criteria. Clear accepts processed automatically. Borderline cases surfaced for human review HITL gate before any final decision.
🌍
International Student Support
Human-BOT handles international enquiries in 50+ languages. High-intent prospects offered a live video session with an admissions specialist inside the chat window.
⚡
Clearing Automation
Clearing vacancies trigger automatic re-scoring and WhatsApp/SMS outreach to eligible waitlisted candidates reducing vacancy-to-confirmed place time from days to hours.
Non-UCAS — FE Colleges, T-Levels & Degree Apprenticeships
Web-Form Webhooks No CRM Migration. No Legacy System Required.
How it connects: NEXUS webhooks plug into your existing web forms WordPress, Typeform, Microsoft Forms, or custom HTML. When a student submits a form or WhatsApp message, HAIYSAI launches a conversational application sequence collecting missing GCSE certificates, residency documents, and employer sign-off for apprenticeships.
⚠ Before Guardian — Non-UCAS Institutions
📧 Direct applications arrive by email staff manually chase missing documents for days
🏢 Apprenticeship employer compliance collected by phone and email no audit trail
🔕 Incomplete applications go cold prospects enrol elsewhere while waiting for a response
⚠️ GDPR data handling inconsistent application data scattered across email inboxes
✅ After Guardian — Non-UCAS Direct Applications
🔗 NEXUS webhook connects to existing web forms applications flow in automatically, no manual handling
🏢 Apprenticeship employer compliance forms routed and countersigned inside Guardian workflow
🔒 All applicant data encrypted at ingestion UK GDPR and Ofsted data compliance by architecture
Platform Architecture
How All 4 Pillars Work Together — Education
Guardian Integration Architecture — All Institution Types
📊
Lead CRM
Merritto / LeadSquared · Private universities
🇮🇳
SAMARTH Webhook
Real-time stream · Govt institutions
🇬🇧
UCAS-Link OAuth2
RESTful API · UK universities
📱
WhatsApp / Web Forms
WhatsApp campuses · FE colleges
↓ All sources authenticated & PII encrypted before processing ↓
NEXUS — Zero-Trust Integration Engine
Modular connector framework. OAuth2 refresh, webhook listeners, batch fetch, WhatsApp media ingestion, and Reverse ETL back to ERP/CRM. No custom middleware required.
Data Privacy Shield — Format-Preserving Encryption
All student PII (name, DOB, marks, biometric, financial data) tokenised using FPE (NIST SP 800-38G) before any AI model processes it. GDPR · DPDP Act · GCC PDPL compliant by architecture.
HAIYSAI — Agentic Workflow Engine
OCR verification, eligibility scoring, personal statement triage, merit ranking, fee reminders, academic workflows, placement coordination. Pauses at human gates before any critical decision.
Borderline admissions · Fraud flags · Fee waiver approvals · Disciplinary matters · Any final decision affecting a student's status
Legal Compliance — Human-In-The-Loop
AI Cannot Reject a Student. Guardian Ensures It Never Does.
UK GDPR Article 22, India DPDP Act 2023, and EU AI Act Article 14 all require human oversight on automated decisions that significantly affect individuals. Guardian's HITL architecture makes this legally safe by design, not by policy.
⚠ The Legal Risk Without HITL
⚠️ UK GDPR Article 22 prohibits fully automated decisions with significant effects including admissions rejections
⚠️ India DPDP Act 2023 requires human review of significant automated decisions affecting data principals
⚠️ EU AI Act Article 14 mandates human oversight for High-Risk AI in education including admissions scoring AI
Guardian's Guarantee
HAIYSAI handles 90% of the information parsing, document verification, scoring, and case preparation but always presents borderline and final-stage decisions to an admissions officer for human sign-off. Your team is always in control.
Staff Review Dashboard — Human Gate in Action
Pending Human Review — Admissions Officer Dashboard
🤖 AI Summary: Applicant exceeds eligibility threshold. Class 12 marksheet verified, no fraud flags detected. Strong profile for direct admission. Recommend conditional offer pending original document submission at enrollment.
Deployment Flexibility
Three Deployment Models — Your Infrastructure, Your Choice
Option A
SaaS Multi-Tenant
Private Universities · Regional Universities · FE Colleges · Type A, B, C
Live in 48 hours no IT infrastructure investment
Secure partitioned data space per institution
NEXUS connectors configured via encrypted dashboard
Scales from 500 to 50,000 applications per cycle
Best for: Private universities (Lead CRM+ERP) · SAMARTH institutions · UK regional universities · FE colleges
Option B
Sovereign Cloud
Russell Group · IITs/IIMs · Top-tier private universities
Dedicated Guardian instance inside your private cloud
NEXUS runs behind your corporate firewall
Data never leaves your institution's jurisdiction
White-label, custom SLA, dedicated engineering support
Best for: Russell Group · IITs/IIMs · ISO 27001 / Cyber Essentials Plus institutions
Option C
WhatsApp-Only Campus
Non-SAMARTH private colleges · Vocational institutes · Type D