FERPA-aligned
Education records are handled with consent, role-based access, and institution-directed disclosure.
Security and trust
Student records first. Independent verification second. Marketing never.
Colleges evaluate credential vendors as school officials under institutional direction. WhiteFish is built for that bar: consent, least privilege, revoke, and credentials that remain verifiable without exposing the student information system.
GDPR-ready
Data-minimization, purpose limitation, and learner control over sharing and retention requests.
Open Badges 2.0
Digital badges carry Open Badge 2.0 metadata employers and other platforms can verify, including third-party badge checkers.
Independent verification
A unique link runs live checks on issuer, holder, integrity, and status, typically in under five seconds, with no registrar callback.
What procurement teams typically ask
We support institutional vendor review, including education-security questionnaires. Independent verification does not mean public student data. It means a receiver can confirm the credential the issuer intended to share, typically in under five seconds, without a callback to records or a lookup in the SIS. Issuance records are cryptographically signed so authenticity can be checked even if a vendor portal later goes offline.
- Encryption in transit and at rest for education records
- Role-based admin access, issuance audit trails, and revoke
- Consent-aware, selective sharing from the Learner’s Passport
- Tamper-evident issuance records with independent verification
- No monetization of learner data as an advertising graph
For registrars, CIOs, and provosts
Request a security discussion with your demo
Schedule a walkthrough of the WhiteFish Credentialing Suite: digital transcripts, diplomas, Open Badge 2.0 credentials, print-ready diploma files, and the Learner’s Passport.