Education buyers are right to ask hard questions about data. Here is how WSI handles security and privacy — stated honestly, without unsupported compliance claims.
Email/password with Supabase Auth, email verification, and password reset. Role-based access for individuals and institutions.
Each institution is a separate tenant. Data is scoped by tenant, and cross-tenant access requires explicit authorization.
Data is encrypted in transit (TLS) and at rest. Credentials and sensitive records follow least-privilege access.
Administrators control roles, invitations, and permissions. Audit-relevant actions are logged for institutional review.
We collect only what is needed to operate the product. You can request data export and deletion per our privacy policy.
Cloud-delivered for speed, with self-hosted options available for products designed to run on your infrastructure.
Talk to WSI about your institution's security, data residency, and compliance needs before you start a pilot.
Talk to WSIWSI does not claim certifications it has not earned. Specific compliance attestations are provided on request for qualified pilots.