Security & Data Processing
How SWIFT handles veteran and student data
SWIFT manages sensitive VA work-study records. Here is what we store, how it is isolated, where it runs, and how to request our Data Processing Agreement.
What data SWIFT stores
SWIFT stores the information needed to run VA work-study: student profiles and contact details, VA contract authorizations and extensions, logged work-study hours, and the supervisor approvals and certifications that go on the VA Form 22-8690.
How your data is isolated
Every institution’s data is isolated at the database with Row-Level Security. Students can read only their own records; supervisors can read only the students they supervise. The boundary is enforced by Postgres policies, not just application code.
Where it runs
SWIFT runs on Vercel (application) and Supabase (managed Postgres and authentication). Data is encrypted in transit with TLS and encrypted at rest.
Compliance posture
SWIFT is built with FERPA and the VA Privacy Act (38 CFR 1.576) in mind: access is least-privilege by role, and every time record keeps an approval trail. SWIFT is an independent product and is not affiliated with, endorsed by, or sponsored by the U.S. Department of Veterans Affairs.
Subprocessors
Data Processing Agreement
We provide a Data Processing Agreement for institutional customers. Request our current DPA, or send us your institution's standard agreement to review and sign.
Request our DPAor email DPA@swift.app