Security and compliance

You are trusting us with your learners' personal data. This page sets out, in plain English, where it is kept, who can see it and how it is protected. Where something is still in progress, we say so.

Where is our data hosted?

In Germany, on servers run by Hetzner, an established European hosting provider. Germany is in the European Economic Area, which the UK recognises as giving equivalent data protection, so your data stays under UK GDPR standards and no special transfer arrangements are needed.

How is our data backed up?

Backups are being set up and tested before any learner data goes on the platform. We will set out exactly how here once they are.

Do you hold Cyber Essentials?

Not yet. We are working towards Cyber Essentials, the government backed scheme that checks the basic security controls every organisation should have in place. We will update this page when we hold it.

Have you completed a data protection impact assessment?

We carry out a Data Protection Impact Assessment for any platform that holds personal data, in line with UK GDPR. Where a product is live and processing learner data, its DPIA is completed before launch and reviewed as the platform develops.

Do you use AI with our data?

Yes, to help assessors, for example drafting feedback and translating into a learner's language. It runs on our own server, so your learners' data is never sent to an outside AI company. Nothing reaches a learner until an assessor has reviewed it, and the assessor makes every decision, as Ofqual and the awarding bodies require.

Who can see our learners' records?

Only the people you give access to, in the roles you give them. Learners see their own record, assessors see the learners assigned to them, and quality assurance staff can read the records they sample. You decide who has which role.

Talk to us about your training provider.

Contact