powstik
Prove

Powstik for Schools · for your IT team

Setting up Powstik at your school

Five minutes. Nothing to install, no directory sync, no admin consent needed for the basics.

Sign-in

Staff and students sign in with an account they already have. Powstik does not store passwords.

  • Google Workspace for Education: “Continue with Google” works with no setup. If your Workspace restricts third-party apps, allow powstik.com (OAuth scopes: openid, email, profile).
  • Microsoft 365 (Entra ID): “Continue with Microsoft” asks only for openid, email and profile, which a user can consent to themselves. Steps for your tenant are below.

Microsoft 365: grant admin consent (only if your tenant blocks user consent)

  1. Sign in to the Entra admin center as a Global Administrator, Cloud Application Administrator or Application Administrator.
  2. Open this link, check the permissions (sign you in, read your basic profile and email address), and choose Accept — this is Grant admin consent for your whole tenant:
    https://login.microsoftonline.com/organizations/adminconsent?client_id=09fc8d2d-c958-4f50-af49-4b8bd58fada9
  3. Or, in Entra admin center → Enterprise applications → find the app by its client ID → Permissions → Grant admin consent for your organisation.

Application (client) ID: 09fc8d2d-c958-4f50-af49-4b8bd58fada9

Redirect URI: https://powstik.com/api/auth/callback/azure-ad

Powstik reads nothing from Microsoft beyond what sign-in returns: no mail, files, calendar or directory.

Require your school domain for staff (optional)

The workspace owner (the coordinator who started it) can require that coordinators and principals sign in with your school’s email domain: Invites → Staff sign-in. It applies to staff only. Students and supervisors are never forced through it: a supervisor confirms a CAS experience from a one-time link, with no account at all.

Email

Sign-off requests and reminders are emailed from notifications@powstik.com. Add it to your allow-list so they reach staff and supervisors.

Data

  • Your school is the controller; Powstik is the processor. Read, print and sign the Data Processing Agreement.
  • Data is stored in the United States. The sub-processor list is in the agreement.
  • The workspace owner can export everything (CSV and print) at any time, in every plan state, and read the audit log of sign-offs, roles, invites, exports, plan changes, reminders and deletions.
  • Each student keeps their own record; the school’s view of it ends when the school leaves.

Questions

Send security questionnaires through the contact page.