Does the school web filter still work on home Wi-Fi and mobile data?
Yes. Skie sets the filter on the device itself, as a locked filtering DNS, so it applies on school Wi-Fi, home Wi-Fi and mobile data alike. It is not tied to the school's router or firewall. The only exception is a network that blocks the encrypted DNS port, which the dashboard flags.
Traditional school filtering sits at the network edge, in a firewall or proxy. That works inside the building and stops the moment the tablet goes home. A student on a hotspot or their own SIM is outside it.
Skie moves the filter to the device. The filtering DNS is configured as the device's Private DNS and locked by the device owner, so wherever the tablet connects, lookups go to the filter. Hotspot and tethering are blocked on managed devices, VPN setup is blocked and the encrypted DNS setting cannot be edited, which removes the common ways of getting onto a different path.
This also answers the question of students who use their own SIM data. The filter still applies. Skie does not include a mobile plan or SIM, so customers use their own carrier, and Wi-Fi-only tablets work for most features.
A realistic condition: on a network that blocks the encrypted DNS port, the device uses that network's DNS for as long as it is there, and the dashboard flags it. That is rare on mobile data and home broadband, and more likely on a locked-down corporate or campus network.
Tip for a pilot: test the same tablet on school Wi-Fi, on a home connection and on mobile data. Open a site from an unsafe category in each place and confirm it is refused. That small test is more convincing to a principal than any explanation.