Skip to content
Higher education and digital study

The university as a tenant: white-label platforms explained

Short answer

A multi-tenant platform runs many institutions on the same software but keeps their data strictly separate; white-label means each university uses the platform under its own brand, address and design. A university thus gets its own digital campus without having to develop and operate software itself.

Key points

  • Tenant = one institution with its own data, users, rights and settings.
  • White-label = own brand, own domain, own look.
  • Strict data separation is mandatory, not optional.
  • Modules and features switchable per university.
  • For special requirements, a dedicated instance with a separate database is possible.

What a tenant is

In software, a tenant is a self-contained unit: a university, a department with its own continuing education, or a company. Each tenant has its own users, courses, examinations and settings — and above all its own data, which no other tenant sees. The software is the same for all; the data are not.

The advantage is obvious: development, security, updates and operations are done once for everyone. A small university gets the same platform as a large one without building its own development team. The precondition is that tenant separation is technically and organisationally reliable.

White-label: your own brand

White-label means the platform appears under the university's brand. Students see their university's logo, colours and address, not the software provider's. Certificates and degree certificates name the university as issuer; courses carry its design.

This is more than cosmetics. For students it is their university, which they trust. For employers checking a credential, what matters is that the issuing university is clearly identifiable. And for the university itself, its own brand is part of its profile in the competition for students.

  • The university's own domain or subdomain.
  • Logo, colours and fonts according to the corporate design.
  • The university as issuer on certificates and degree certificates.
  • Own texts for home page, legal notice and privacy notice.

Data separation and data protection

Legally, the university is the controller for its students' and staff's data, the platform operator a processor. This requires a contract under Article 28 GDPR. Technically, it must be ensured that every query returns only the tenant's own data — ideally through rules directly in the database that even a programming error cannot bypass.

For universities with special requirements — for instance from state law or because of sensitive research data — a dedicated instance can make sense: the same software, but with its own database and separate deployment. The price is higher operating effort; the gain is maximum separation. The university should decide which option fits together with its data protection officer and IT security, and document the outcome.

ModelData separationEffort
Tenant on a shared platformLogical, through rules in database and applicationLow; updates for everyone at once
Dedicated instancePhysical, own database and deploymentHigher; separate operation per instance

Modules and features as needed

Not every university needs everything. A campus-based university might use only examinations and verifiable degree certificates, a distance-learning university the full chain from application to graduation, a continuing education academy courses and participation certificates. A modular platform lets each tenant book building blocks and switch individual features on or off. What is not booked does not appear.

It matters that modules fit together but do not have to depend on each other. A university that keeps its existing learning system should still be able to use examinations or certificates from the new platform — connected through standards such as LTI 1.3.

What universities should look for

Choosing a white-label platform is a decision for years. Besides features, reliability, transparency and the possibility of leaving again count.

  • Demonstrable tenant separation and data storage in the EU.
  • Data processing agreement with a list of sub-processors.
  • Export of all data in open formats.
  • Open interfaces to existing systems.
  • Accessible user interfaces.
  • Clear rules on how AI is used and labelled.

Introduction in practice

The path to your own platform starts with a few decisions: at which address should it be reachable? Which modules does the university need at launch? Who manages users and rights? Then come brand and content — logo, colours, texts, first courses — and connecting existing systems, such as sign-in with the university account.

Before students use the platform, the data processing agreement, privacy notice, legal notice and, where required, accessibility statement should be in place. A short pilot with a group of lecturers and students shows whether processes and texts are understandable.

Step by step

  1. Set address and modules

    Choose the domain and the modules the university starts with.

  2. Set up the brand

    Upload logo, colours, fonts and texts according to the university's design.

  3. Clarify legal matters

    Settle data processing, privacy notice, legal notice and accessibility.

  4. Connect

    Link sign-in with the university account and existing systems via interfaces.

  5. Pilot

    Test with a small group, incorporate feedback, then open to everyone.

Terms

Tenant
Self-contained unit in shared software with its own data, users and settings.
White-label
Using software under one's own brand and design, with no visible provider.
Instance
Independently running installation of software with its own database.

Frequently asked questions

What does white-label mean for a learning platform?

The platform appears under the university's brand, address and design. Students and employers see the university, not the software provider.

Do other universities on the same platform see my data?

With proper tenant separation, no. Every query returns only the tenant's own data; this should be secured technically by database rules and governed by contract.

When is a dedicated instance worthwhile?

When special legal or organisational requirements call for physical separation. It brings maximum separation but higher operating effort.

Who issues the certificates — university or provider?

The university. It is the issuer and appears on the credential; the provider only supplies the technology.

Can a university use only some modules?

With a modular platform, yes. A university can, for example, book only examinations and verifiable degree certificates and keep its existing learning system; the connection then runs via standards such as LTI 1.3 or export formats.

What happens to the data if the university switches provider?

Under Article 28(3)(g) GDPR the processor must delete or return all data at the end of the service. It is important to agree a complete export in open formats beforehand.

How it works in Universe

Related articles

Sources

  1. Regulation (EU) 2016/679 (GDPR) — EUR-Lex