Trust & Security
Your data security and privacy are foundational to everything we build. We employ enterprise-grade security measures to protect your information and ensure a safe governance training environment.
Our Security Pillars
Multiple layers of protection work together to keep your data safe.
Data Encryption
All data is encrypted both in transit and at rest using industry-standard protocols.
- TLS 1.3 encryption in transit
- AES-256 encryption at rest
- Secure key management
Multi-Factor Authentication
MFA is supported and available to add an extra layer of security to your account.
- TOTP authenticator app support
- Email verification codes
- Recovery code backup
Data Isolation
Your data is logically isolated using Row-Level Security policies at the database level.
- Row-Level Security (RLS) policies
- User-scoped data access
- Audit logging
Secure Infrastructure
Our infrastructure is hosted on enterprise-grade cloud platforms with built-in security.
- SOC 2 compliant hosting
- Automatic security updates
- 99.9% uptime SLA
Access Control
Role-based access control ensures users only access what they need.
- Role-based permissions
- Secure session management
- Automatic session timeout
Security Monitoring
Continuous monitoring and regular audits help us identify and respond to threats.
- 24/7 security monitoring
- Regular security audits
- Vulnerability scanning
Compliance & Privacy
We adhere to industry standards and regulations to protect your privacy.
GDPR Compliant
Full compliance with the General Data Protection Regulation for EU users.
CCPA Compliant
Full compliance with the California Consumer Privacy Act for California residents.
Data Control
You have complete control over your data. Export or delete your information at any time.
Your Data Rights
Right to Access
Request a copy of all personal data we hold about you. We will provide this within 30 days of your request.
Right to Rectification
Request correction of any inaccurate or incomplete personal data. You can update most information directly in your profile settings.
Right to Erasure
Request deletion of your personal data. We will process your request within 30 days, subject to legal retention requirements.
Right to Data Portability
Export your data in a machine-readable format. Your training history and progress data can be exported at any time.
Security Questions?
If you have any questions about our security practices or need to report a security concern, our team is here to help.