Security and privacy
Security, privacy and hosting in the Wise Booking System
WBS is a cloud service run by Wise Technologies, certified to ISO/IEC 27001:2022, with HTTPS everywhere, rights checked by the server on every request, and very little personal data.
Hosting
WBS is delivered as a cloud service run by Wise Technologies: the institution needs a browser and nothing else. Updates are applied by Wise, and daily backups are included.
For institutions whose policy requires it, the platform can also be installed in the institution's own network.
Security
| Topic | In WBS |
|---|---|
| Certified | Wise Technologies d.o.o. holds ISO/IEC 27001:2022 certification for information security. |
| Encrypted | All traffic is HTTPS; sensitive information is encrypted in storage and in transit; the institution's mail password is sealed with a key that exists only on the server. |
| Sessions | Eight hours for staff, after which they sign in again; sign-in attempts are limited per connection. |
| Least privilege | Rights come from the person record and are checked by the server on every request, whichever screen or system sends it. |
| Microsoft sign-in | OpenID Connect with PKCE; WBS never sees a Microsoft password and reads no mail, files or directory data. More about Microsoft 365 sign-in. |
Privacy (GDPR)
The institution is the controller; Wise Technologies, an EU company, is the processor.
- A data processing agreement is available, and Wise will sign the institution's own wording on request
- Data is not transferred outside the EEA without safeguards
- Sub-processors are disclosed on request
- Customer data is never sold or used to train models
- WBS needs very little personal data: a name and an e-mail address for the people who book
See WBS with your own rooms
Book an online presentation. We set up your rooms and your booking rules, and a new institution is usually live within a few days.