Security / trust page — TalentLMS

Cited by

Facts read from this source

• ISO 27001 Report an error

  “ISO/IEC 27001:2022: This standard demonstrates that we manage the security of our information according to the practice internationally recognized as the best.”

• ISO 9001 Report an error

  “ISO 9001:2015: Compliance with ISO 9001 confirms that the quality of our product and the processes we use are efficient.”

• ISO 14001 Report an error

  “ISO 14001:2015:Compliance with ISO 14001 demonstrates that we manage our environmental responsibilities in a systematic and sustainable manner.”

• ISO 45001 Report an error

  “ISO 45001:2018: Achieving ISO 45001 certification demonstrates that we prioritize the health, safety, and well-being of our employees.”

• GDPR Report an error

  “GDPR-compliant: We comply with the European Union General Data Protection Regulation. TalentLMS is verified compliant with the EU Cloud CoC, Verification-ID: 2020LVL02SCOPE003.”

• Provider Report an error

  “TalentLMS is exclusively hosted on Amazon Web Services (AWS).”

• Encryption Report an error

  “All AWS servers are encrypted with AES-256.”

• Backups Report an error

  “We take backups that are stored on multiple devices across multiple facilities in multiple availability zones. Daily backups ensure we can restore your data in case of failure or accidental deletion.”

• Infrastructure 2FA Report an error

  “We implement Two-Factor Authentication (2FA) for access control to our infrastructure.”

• Vpn access Report an error

  “We’ve built a security perimeter and permit VPN access to our network with an added layer of 2FA.”

• Firewalls ddos Report an error

  “Our infrastructure is protected by Web Applications and Network firewalls. – We apply robust DDoS protection measures.”

• Bcdr Report an error

  “We’ve established BCDR and incident response plans.”

• Infrastructure as code Report an error

  “Our infrastructure provisioning and configuration are managed through Infrastructure as Code practices.”

• Sast dast Report an error

  “These include Static Application Security Testing (SAST) and Dynamic Application Security Testing (DAST).”

• Penetration testing Report an error

  “We conduct frequent penetration tests on our infrastructure to identify and prevent vulnerabilities.”

• Bug bounty Report an error

  “We’ve established a bug bounty program so researchers can report potential security issues. We also have a comprehensive vulnerability detection policy for responsible disclosure.”

• Background checks Report an error

  “Before hiring, we conduct background checks.”

• Employee confidentiality agreements Report an error

  “All employees sign confidentiality agreements.”

• Security training Report an error

  “All employees are trained in security and privacy, including best security practices, information on new threats and vulnerabilities, as well as privacy and legal/regulatory issues.”

• No local download Report an error

  “We never download customer data on our premises.”

• Cyber insurance Report an error

  “We are insured against cybersecurity incidents.”

• Uptime Report an error

  “We strive to maintain a high level of availability for our services, with 99.9% uptime. You can check the real-time status of our system at any time by visiting https://status.talentlms.com.”

• Multi az autoscaling Report an error

  “We design our infrastructure with redundant architecture in mind, using Multi-Availability Zone deployments. – Our infrastructure comes with autoscaling capabilities to optimize performance.”

• SLA Report an error

  “Our Service Level Agreement (SLA) outlines our commitment to availability and stability.”

• Monitoring 24 7 Report an error

  “Our alerting and incident response operates 24/7, meaning that our team remains continuously vigilant and ready to address any malfunctions that may affect the platform.”

• Intrusion detection Report an error

  “We have an Intrusion Detection System in place that constantly monitors our network and systems for suspicious activity.”

• Security features Report an error

  “– Secure API integration – Ability to restrict registrations to specific domains – Prevention of multiple logins from the same user – Ability to add watermarks on your uploaded content to prevent copyright violations – Ability to disable iframes – Secure intercom communication between users – Emergency account lock – Emergency mobile access lock – Ability to hide the domain from search engines”

• Pci billing Report an error

  “Your card information is transmitted, stored, and processed securely on a PCI-Compliant network, where all transactions are processed using secure encryption – the same level of encryption used by leading banks. – We do not keep credit card information on our infrastructure in any way.”

1 fact read from this page is not shown because it could not be confirmed on the page as captured.

Scores citing this record

• The Works Council Member European sovereignty