Infrastructure
SquareCampus is hosted on Microsoft Azure in India. This page describes how the platform is designed — and anything it does not answer, we will answer in writing during your evaluation.
Cloud
Microsoft Azure
Region
India
Residency
India-first posture
Encryption
Transit & at rest
Why managed cloud
Data residency isn't defined by who makes the servers — it's defined by where they physically sit and how access is governed. Choosing Microsoft Azure in India is an engineering decision.
In this market, “own servers in India” can mean very different things:
Rented racks in shared co-location facilities
A VPS from a hosting provider, sometimes outside India
A single server in a locked room on consumer hardware
“Own” hardware leased from a local hosting company
None of these are automatically bad — but they are different risk profiles, and an institution deserves to know which one it is buying. The useful move is to ask every vendor, including us, the same infrastructure questions in writing.
The comparison
What we run, next to the questions worth asking any vendor.
Data residency
SquareCampus · Azure, India
Microsoft Azure, India
The platform is hosted on Microsoft Azure in India. The specific regions and data flows are named in writing during evaluation.
Typical unspecified claims
“India” (unspecified)
Often vague: an India endpoint can sit in front of infrastructure hosted anywhere.
Ask every vendor: Which region and provider, in writing?
Reliability design
SquareCampus · Azure, India
Documented resilience
High availability, backup and recovery design are documented in writing and shared during evaluation, so the answer is specific to your deployment rather than a marketing line.
Typical unspecified claims
Single location
One facility means one point of failure and manual recovery.
Ask every vendor: What is your recovery plan if the building fails?
Physical security
SquareCampus · Azure, India
Microsoft Azure data centres
Azure facilities carry independent certifications (published by Microsoft). Our application-level controls are documented separately and shared on request.
Typical unspecified claims
“Secure” (undefined)
Varies widely; sometimes a locked room with no third-party attestation.
Ask every vendor: Can you share any third-party attestation?
Scalability
SquareCampus · Azure, India
Cloud auto-scaling
Capacity can be added for admission season and exam-week load without hardware purchases, in the same region.
Typical unspecified claims
Hardware bottleneck
Physical servers must be ordered, shipped, and installed to grow.
Ask every vendor: How do you handle a 10x load spike?
Transparency
SquareCampus · Azure, India
Questions answered in writing
We answer infrastructure questionnaires in writing and share architecture documentation during the security review process.
Typical unspecified claims
Vague claims
“Own servers” without documentation is a marketing line, not an architecture.
Ask every vendor: Will you put your answers in writing?
Design decisions
These are the architectural commitments the platform is built around. The specifics behind each one are documented for security reviews.
The platform runs on a hyperscale cloud designed so that a problem in one facility does not take daily campus operations down. The availability design for your deployment is documented during security review.
Backup cadence, retention and restore procedures are documented in writing and shared during security review.
Data is encrypted in transit and at rest as baseline infrastructure, with access controlled by roles and administrative activity logged.
The platform is designed to keep institutional data in Microsoft Azure regions in India. Enterprise private deployments on AWS, in a private cloud or on premises are scoped with the same residency expectations.
Application servers are designed to sit behind managed network protections rather than being directly exposed to the internet.
Architecture summaries, data-flow documentation, and questionnaire responses are available to evaluating institutions through the security review process.
Due diligence
Use these during your evaluation and compare the answers in writing.
Why it matters: “Hosted in India” without a named region and provider is unverifiable.
Why it matters: This separates a real architecture from a single server in a rack.
Why it matters: Anyone can say “secure”. Attestation and documentation are what procurement can rely on.
Why it matters: Verbal assurances do not survive procurement or audits.
Infrastructure FAQ
Infrastructure review
Bring your security questionnaire, your IT committee, or your auditor. We answer infrastructure questions in writing as part of an evaluation.
