Harvey does not ask schools to bypass security controls. Please review and approve access under your district's normal vendor and web-filter process.
Domains to review
- hiharvey.com — public website, sign-in, workspace, API, privacy, and terms.
- www.hiharvey.com — redirects to the canonical HTTPS site.
Access requirements
- Allow HTTPS traffic on TCP port 443.
- Permit first-party cookies and JavaScript for authentication and workspace functions.
- Do not rewrite authenticated Harvey URLs through a shared session or credential proxy.
- Allow transactional email from the school-approved Harvey sender when account invitations are requested.
Security and privacy references
Harvey uses HTTPS and publishes separate public-site and authenticated-app policies. Review the Privacy Policy, Website Terms, App Privacy, and App Terms.
Classification review
Because hiharvey.com is a recently registered domain, some security vendors may initially place it in an uncategorized or grayware bucket. Harvey is pursuing authoritative recategorization. District IT teams may independently inspect and allowlist the domain after completing their normal security review.
Need verification?
Send the blocking product name, category shown, timestamp, and a screenshot to hello@hiharvey.com. Do not include student records, passwords, or other sensitive information.