Built with security
Data protection and security for universities
Everything your data protection officer, IT team and procurement need for a first evaluation, on one page.
Hosting and infrastructure
- Servers at Hetzner in Falkenstein, Germany
- Encrypted connections (TLS)
- Automated backups, also in Germany
Separation and access
- Each university is its own space, separated at database level (row-level security)
- Automated isolation tests on every release
- Roles for your team: owner, staff, read-only
- Our operations accounts are separate from student accounts; every cross-institution access is logged
Sign-up and verification
- Joining only with an invite code or a verified email domain of your university
- Codes can be revoked at any time
- Verified badge on every profile
- Single sign-on (Shibboleth, DFN-AAI) is planned
Moderation and safety
- Students can block and report
- Reports go to a moderation queue that your International Office sees and acts on
- Decisions are recorded with their outcome
Data protection documents
- iNZi acts as your processor
- Data processing agreement (AVV) under Art. 28 GDPR
- Technical and organisational measures (TOM)
- Students agree to versioned terms and privacy notices
End of contract
- Your university's data is deleted within 30 days of the contract ending
Documents and contacts
We send the AVV, TOM and further documents to your data protection officer on request. Questions about data protection and security go to hi@inzi.global.
Questions on data protection and operation
Can students from other universities see ours?
No. Each institution is a closed space, separated in the database. Cross-institution matching is off.
What happens if a student behaves badly?
Students can block and report. Reports go to a moderation queue, and your office can see and act on them.
What happens to the data when the contract ends?
Your university's data is deleted within 30 days of the contract ending.
Can we sign in with our university accounts (Shibboleth, DFN-AAI)?
Not yet. Students join with an invite code or their university email. Single sign-on is planned.
Does our IT team need to do anything?
No. There is nothing to install and no interface to your campus management system. Students join with an invite code or your university's email domain.
Is there video calling?
Not in the first year. Students can meet online when meeting in person is not possible, and arrange that themselves. Meeting in person on campus remains the goal.