1. A web service provision system, comprising: a web application server that executes a web application; a client terminal on which a web browser is installed; and a database server connected to the client terminal through an intranet, wherein the web application server includes: a user information management unit that manages user IDs and attributes such that each of the user IDs is associated with corresponding one of the attributes, a security policy management unit that manages security policies such that each of the security policies is associated with corresponding one of the attributes, each of the security policies defining the web application server or the database server as a storage destination of personal data of corresponding one of users, a security policy acquisition unit that acquires one of the security policies based on one of the attributes associated with one of the user IDs transmitted from the web browser, and an HTML file generation unit that generates an HTML file based on the one of the security policies acquired by the security policy acquisition unit.