Security / trust page — LearnWorlds

Cited by

Facts read from this source

• Isolated databases Report an error

  “Each LearnWorlds School has its own, isolated Database. This means that even if a School gets compromised or goes rogue, all other Schools will remain unaffected.”

• Daily backups Report an error

  “Databases are mirrored and backed up off site, across multiple facilities. We keep daily database backups.”

• Password hashing Report an error

  “School Admin Passwords are salted and hashed and never stored or transmitted as plain text.”

• Https ssl Report an error

  “LearnWorlds forces all requests over HTTPS, ensuring that all traffic between your school and the user’s browser is encrypted.”

• Ssl certificate Report an error

  “All schools powered by LearnWorlds receive a free lifetime SSL certificate.”

• Tls minimum Report an error

  “LearnWorlds uses a minimum of TLS 1.3 across its platform, sites, and subdomains”

• Xss protection Report an error

  “All user inputs are properly treated to ensure that XSS vulnerabilities are avoided.”

• Pci dss Report an error

  “At LearnWorlds, we prioritize the security of your payment information by adhering to PCI-DSS (Payment Card Industry Data Security Standard) guidelines.”

• Payment gateways Report an error

  “Instead, we rely on trusted payment gateway providers, such as Stripe and PayPal, to manage all credit card data securely. These providers are PCI DSS Level 1 Service Providers”

• No cc storage Report an error

  “LearnWorlds itself does not store, process, or transmit any credit card information.”

• Vulnerability scanning Report an error

  “We have automated systems in place that monitor all the software infrastructure that powers LearnWorlds for new versions and vulnerabilities.”

• Penetration testing Report an error

  “We test our systems regularly through simulated attacks from the outside and in.”

• Secure file storage Report an error

  “Your uploaded files can only be accessed through LearnWorlds. Your students can only access files intended for them.”

• Employee access controls Report an error

  “For our employees, access rights and levels are based on job function and role, on a need-to-know basis”

• Data not moved offsite Report an error

  “We never move any school or user data outside of our secured environment for testing or any other reason.”

• Provider Report an error

  “LearnWorlds is a Google Cloud partner so we primarily use top-notch Google Cloud Platform servers as our third-party cloud storage subcontractor and we do not host customer data on our premises.”

• Regions Report an error

  “East USA (South Carolina & Virginia, USA, North America) Central EU (Frankfurt, Germany, Europe) South America (São Paulo, Brazil, South America) Southeast Asia (Singapore, APAC)”

• High availability Report an error

  “we have a suite of contingency mechanisms, including automatic failover, to ensure 24/7 application availability.”

• Suspicious activity monitoring Report an error

  “We monitor and will automatically suspend accounts for signs of irregular or suspicious login activity.”

• Account change notifications Report an error

  “Certain changes to your account, such as to your password, will trigger email notifications to the account owner.”

• Security disclosure email Report an error

  “If you do find any security issues, whether you are a user or security expert, please reach out to us at support@learnworlds.com.”

• Data center physical security Report an error

  “All servers are protected by biometric locks and round-the-clock interior and exterior surveillance monitoring.”

1 fact read from this page is not shown because it could not be confirmed on the page as captured.

Scores citing this record

• The Compliance Officer Integrations, administration & portability
• The Compliance Officer European sovereignty
• The Customer Education Lead European sovereignty
• The IT & HR Systems Admin Integrations, administration & portability
• The IT & HR Systems Admin European sovereignty
• The Onboarding Lead Integrations, administration & portability
• The Onboarding Lead European sovereignty
• The Skeptic Integrations, administration & portability
• The Skeptic European sovereignty
• The Works Council Member Integrations, administration & portability
• The Works Council Member European sovereignty