Skip to main content
A Privacy Impact Assessment or Cyber Risk Assessment is completed by the school or organisation responsible for the proposed use of SupportWise. Solvanta can provide the vendor information needed to support that assessment.

​
Information available for your PIA

Product purpose

Intended use, stakeholders and product boundaries.

Data inventory

Typical learner, staff, timetable, operational and technical information.

Hosting and security

Hosting locations, encryption, access controls and security architecture.

Subprocessors

External service providers, purpose and processing locations.

Retention

Active-service retention, offboarding and deletion approach.

Integrations

LISS, structured imports and identity-provider data flows.

​
Suggested assessment questions

Your review may wish to consider:
  • What learner and staff information will we configure or import?
  • Is each field necessary for the intended support-coordination purpose?
  • Which roles will have access to learner information?
  • Which integrations and subprocessors will be used?
  • Are any free-text fields being used for information that belongs in a specialist wellbeing, medical or case-management system?
  • What retention and offboarding requirements apply to the school?
  • Does the school’s jurisdiction require additional privacy, records-management or security review?

​
Vendor assistance

Solvanta can respond to a school or system questionnaire, clarify data flows and provide supporting security or privacy documentation.
Solvanta will not complete a school’s assessment on its behalf, but will support the school by providing the information needed to make an informed decision.