// Trust & Security Report
Quizizz Inc. (DBA Wayground)
K-12 formative assessment and gamified learning platform (Quizizz, rebranded to Wayground in 2025) with related sub-products: Wayground for Business (corporate training), Skillet (AI sales roleplay/coaching, skillet.io), and Voyage Math (math practice, voyagemath.com).
Certifications held
4
Maturity
Growth
Trains on your data
No
Trust center
Yes
// Certification ledger
Each held certification is backed by a verbatim quote from the vendor's own trust or security page. “Not confirmed” means we could not verify it publicly, not that the vendor lacks it.
Verify on wayground.com“Wayground is ISO/IEC 27001:2022 certified. This certification demonstrates our adherence to international standards for information security management, ensuring that we have robust policies, procedures, and controls in place to manage risks and safeguard your data.”
Verify on wayground.com“We are committed to complying with GDPR, ensuring that your personal data is processed securely and in accordance with these regulations.”
Verify on wayground.com“We comply with FERPA and COPPA and will work with your organization to meet relevant state and regional privacy commitments.”
Verify on wayground.com“We comply with FERPA and COPPA and will work with your organization to meet relevant state and regional privacy commitments.”
> Show 6 unconfirmed / not-held certifications
source: trust.quizizz.comNo SOC 2 badge, report, or descriptive certification text was found on any wayground.com privacy/security/help page. A Drata-powered Trust Center exists at trust.quizizz.com, but it returns HTTP 403 (access-gated / requires request) and could not be directly verified. No public vendor-domain proof of a completed SOC 2 report exists as of verification date.
source: wayground.comNo public evidence. HIPAA is not mentioned on the privacy policy, privacy center, or help center pages. The product is a K-12 education tool and is not marketed or positioned as a HIPAA covered entity or business associate.
source: wayground.comFinancial transactions are processed via a PCI-compliant payment provider. This is the third-party payment processor's certification, not a PCI DSS certification held by Quizizz Inc. / Wayground itself.
source: wayground.comNo public evidence. Not mentioned on any wayground.com or help.wayground.com page despite significant AI-feature marketing (Wayground AI, AI Question Generator, AI Presentation Maker, etc.).
source: wayground.comNo public evidence; product is not marketed for U.S. federal government use.
// Privacy & AI training
Trains on customer data
No
Data processing agreement
Offered
Data region
United States, AWS-hosted. Privacy policy: 'the service is hosted in the United States. The information we collect is hosted on servers located in the United States.' No EU/regional data residency option is documented publicly. DPAs are explicitly referenced for Canadian institutions/school districts; broader DPA availability for other regions is implied for institutional customers but not itemized.
Wayground states it has disabled use of Wayground user data for training LLMs, and that its AI providers do not use Wayground data for model training: 'we have disabled their use of any Wayground user data for training their own large language models (LLMs), and our AI providers do not use our data to train their LLMs.' Separately, the help center states: 'OpenAI does not use any of your personal data for training its models,' and that Wayground AI 'solely uses the inputs teachers provide to generate content' without touching student personal data. No tier-based (free vs paid) distinction in this posture was found in current copy.
// Security controls
Encryption in transit
Industry-standard encryption in transit using up-to-date certificates from a verified third-party provider (DigiCert).
help.wayground.comData center controls
Data stored in access-controlled data centers with 24/7 monitoring by AWS.
help.wayground.comAccessibility compliance
Follows VPAT guidelines documenting compliance with Section 508 and WCAG; VPAT available upon request.
wayground.com// Products & data scope
data: Student PII (email, first/last name, parent or guardian email in limited cases); accounts are optional for basic use.
Primary teacher/student-facing product. Free teacher plan plus paid School & District plans. Covered by the FERPA/COPPA/GDPR posture and ISO/IEC 27001:2022 certification documented on wayground.com.
data: Employee/learner data for corporate training programs.
Quote-based enterprise sales ('Get a Quote'). No compliance posture separately documented from the core K-12 product; assume same corporate-level controls but unconfirmed.
data: Sales rep interaction/roleplay data.
Linked from the Wayground for Business navigation as a separately branded product on its own domain (skillet.io). Its own privacy/security posture was not evaluated in this assessment; verify independently before crediting it with Wayground's certs.
data: Student practice/performance data.
Separately branded sub-product on its own domain, linked from the Wayground nav as 'Math Practice New'. Own privacy/security posture not evaluated in this assessment.
// What to watch
- SOC 2 status is unresolved: vendor operates a Drata-powered Trust Center (trust.quizizz.com) but it is access-gated (HTTP 403 to public/automated access) and no SOC 2 badge or descriptive text appears anywhere else on wayground.com. Do not list SOC 2 as held until verified via direct access request to the trust center.
- Third-party aggregator/search-summary sources claim Quizizz/Wayground holds SOC 2, PCI DSS, HIPAA, FedRAMP, and CSA STAR certifications; none of these could be corroborated on any wayground.com or quizizz.com page. Treat as unverified over-claims and exclude from the public listing.
- Legacy help-center copy (help.wayground.com, dated 2025-06-18 content block referencing the older support.quizizz.com article) still cites the defunct 'EU-U.S. Privacy Shield Framework' (invalidated 2020), which is inconsistent with the current, Privacy-Shield-free GDPR language on the privacy center page. This is stale legal copy the vendor should update; flagged as a contradiction, not used to grade GDPR.
- PCI DSS applies only to Wayground's third-party payment provider, not to Quizizz Inc./Wayground itself; do not display as a Wayground certification.
- No AI-governance certification (ISO/IEC 42001, CSA STAR) despite prominent AI-feature marketing (Wayground AI, multiple AI generators). Training-data posture is documented and favorable, but formal AI-governance certification is absent.
- Brand identity: product recently rebranded from 'Quizizz' to 'Wayground' (same legal entity, Quizizz Inc., DBA Wayground, same underlying domains/infrastructure). Listing should reflect 'Wayground' as the current name while retaining 'Quizizz' for search/legacy recognition; do not treat them as different vendors.
// At a glance
Pricing model
Freemium (free teacher plan) plus paid School & District plans and quote-based Business/Enterprise plans
Self-hostable
No
// How we verified this
Every certification marked HELD is confirmed against a verbatim quote on Quizizz Inc. (DBA Wayground)'s own trust, security, or privacy pages. We reject certifications claimed only on third-party aggregators, on a cloud host's behalf, or by a similarly named company.
Last verified 2026-07-08. Compliance changes over time. Always confirm directly with the vendor before relying on any certification for a purchasing or compliance decision.
trust.quizizz.com