Skip to content

Security and trust

whysdm is built for institutions that answer for their data.

What we use

Public social media and news in your country and in students’ home countries, in their own languages, and official data such as enrolment data and visa grant rates. Nothing private.

What we never do

  • Identify private individuals.
  • Quote anyone who may be under 18. They are counted, never quoted.
  • Ask you for student data.
  • Share one institution’s brief with another.

How agents are rated

Agencies are named from public registers, company filings and universities’ published agent lists. Individual agents are never named.

Each agency is ranked by public threads from students, applicants, parents and graduates, which is not its market share. Its band, from complaints found to mostly positive, comes from those threads and its public Google reviews, and fewer than five threads is too little to judge. An agency’s own posts never count towards its band, and its own claims are marked as its own.

How access is governed

Access is governed in tiers:

Structured insight
by default
Redacted excerpts
only if you opt in
Raw content
gated to enterprise customers

Excerpts and raw content about anyone under 18 are never shared.

How AI is used

The English in every brief is a language model’s reading of the original post, and the original is always linked. The assistant answers from your brief and cites its sources.

Security

ISO 27001 certification pathway commenced with a JAS-ANZ accredited certification body. Security and privacy documentation is available to IT and procurement teams on request.

Cookies and analytics

We use three tools on this site: Ploy, Google Analytics and HubSpot. Ploy counts visits, measures how far people scroll and what they click, and identifies the organisation a visit comes from. Where its business-identity service finds a match, it can also provide business contact details such as name, company and job title. We use this to understand interest in whysdm and to follow up with institutions. Ploy sets ploy_anon_id, an anonymous visitor ID, and ploy_consent, which records your choice. Google Analytics measures visits and engagement, and sets _ga and _ga_9R0MXK6MDZ. HubSpot runs the cookie banner and, once you’ve filled in one of our forms, records which pages you visit. It sets hubspotutk, __hstc, __hssc and __hssrc, and __hs_cookie_cat_pref to remember your choice. In the EU, the EEA and the UK, these cookies stay off until you accept them. Elsewhere they’re on by default, and you can turn them off at any time from Cookie settings in the footer. We honour Global Privacy Control signals. For more, see our Privacy Policy.

The company

Chatstat Pty Ltd, ABN 72 651 491 637, Brisbane, Australia.

Back-to-back winner, AFR Most Innovative Companies 2025 and 2026, Government, Education & Not-For-Profit.