Is Whatfix for Compass safe?

Clean risk

Whatfix for Compass captures page DOM content and cookie-accessible assets and uploads them to Whatfix's own servers during Studio authoring sessions.

When a content author opens Whatfix's "Studio" web app on a supported page, the extension is signaled to start a capture session. It then reads the page's DOM/HTML and fetches page assets (using the page's own cookies to access them), and uploads that content to Whatfix's own dashboard backend so the author can build interactive walkthroughs from the captured screens. The upload target is limited to Whatfix's own domain and only runs while a Studio session is active.

Whatfix Incv2026.4.2.841Chrome Web Store
0Risk
Who publishes it

Whatfix Private Limited - 4 other listings from the same operator, none carrying a finding

What this publisher told the store about itself, and the other listings that told it the same thing.

Publisher
Whatfix Inc
Declared legal entity
Whatfix Private Limited

Same operator - 4 listings

Published under a different store account, but sharing the registered address, contact or declared legal entity this one gave the store.

Shared hosts - 1 hostname

Hostnames hardcoded in this extension that few other listings call. That can mean one operator behind both, and it can equally mean a small shared vendor, so it is context rather than a conclusion. Hosts that many listings call are left out: they are services, not connections.

addons.whatfix.com
Also called by 9 other listings

AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.

Publishers can request a review.

What it can do

Permissions this extension asks for, as declared in version 2026.4.2.841. Asking for a permission is not a finding on its own - it is what the extension can do if it chooses to.

  • Read and change your data on whatfix.com

    https://*.whatfix.com/*

  • See every page you navigate to, as you navigate to it

    webNavigation

  • Store data in your browser

    storage

  • Schedule its own background tasks

    alarms

Where it sends data

Destinations our analysis observed Whatfix for Compass contacting. Sending data somewhere is not a finding on its own - an extension that syncs your settings has to talk to its own server - but it is where your data can go, and who else it goes to.

  • whatfix.com

    Whatfix for Compass sends data to whatfix.com. No other extension we have analyzed sends data here.

Updated 30 September 2026ieeplfaakojefnkeadecfnbbekokhdbc