Security / trust page (GDPR) — TalentLMS

Cited by

Facts read from this source

• GDPR program completed Report an error

  “We have successfully completed a GDPR compliance program internally so as to be fully compliant with GDPR prior to when the new legislation comes into force (May 25, 2018).”

• EU cloud coc Report an error

  “We also constantly monitor the guidance around GDPR compliance from privacy-related regulatory bodies and codes of conduct, and have recently joined the EU Cloud Code of Conduct, an EU Data Protection Code of Conduct for cloud service providers containing rigorous assurances for the protection of data in cloud services. TalentLMS is verified compliant with the EU Cloud CoC, Verification-ID: 2020LVL02SCOPE003.”

• Breach notification 72h Report an error

  “In the highly unlikely case of a data breach, have a policy and plan in place to notify the supervisory authorities and affected data subjects within 72 hours.”

• Privacy contact email Report an error

  “Ensuring that the TalentLMS data privacy personnel are easily reachable through email privacy at talentlms dot com so that users can drop questions, lodge complaints, or exercise their rights.”

• Provider Report an error

  “Our cloud infrastructure utilizes Amazon Cloud servers and S3 storage with AES-256 encryption.”

• Ssl tls Report an error

  “All TalentLMS communications are encrypted using a highly secure version of SSL/TLS with strong ciphers, resulting in an A+ security rating.”

• Security standards Report an error

  “On top of that, we have invested in building a robust privacy and security team, adhering to NIST recommendations”

• Bug bounty Report an error

  “assessing our software and deployments, running a bug bounty program, monitoring our infrastructure, protecting customer data, ensuring disaster recovery, business continuity, and high availability.”

• Sccs Report an error

  “To comply with E.U. data protection laws around international data transfer mechanisms, data transfers are subject to the latest versions of the Standard Contractual Clauses approved by the European Commission from time to time, as published in the Official Journal of the European Union.”

• Adequate countries only Report an error

  “TalentLMS will never employ subprocessors that retain facilities or may perform processing in countries that are not contained in the list of countries for which the European Commission has explicitly affirmed on the adequacy of the protection of personal data.”

• DPA available Report an error

  “Provide sufficient information regarding the TalentLMS service through the Privacy Policy, Terms of Service, and DPA.”

• Retention account Report an error

  “all account data is kept for 12 months after an account cancellation to ensure that a service re-connection will be as smooth as possible. Inactive domains for a period of 12 months or more are deleted by the system.”

• Erasure on request Report an error

  “You can also contact us at privacy at talentlms dot com if you want your data to be deleted upon your account cancellation; we will permanently delete your account and all data associated with it within at most thirty days.”

• Restriction of processing Report an error

  “TalentLMS supports the right to request the restriction of processing by providing the administrator to render any user as “Inactive”. This can also be done for large sets of users by means of selecting them and subsequently invoking the “Make active/inactive” mass action.”

• Data portability export Report an error

  “TalentLMS by design supports exporting in multiple formats, including CSV, XLS, and SCORM.”

• End user self deletion Report an error

  “the end user may directly self-delete himself from the TalentLMS service by means of the “Delete my account” option that is available below the “More” button on the user profile.”

• Mass user deletion rules Report an error

  “This rule-based approach to the right to be forgotten for a large number of users, where manual deletion for each individual would be tedious, is already possible for the administrator by creating a custom report and then performing a mass action to delete the users of the list”

• Consent tos capture Report an error

  “each domain administrator may set through the “Users” tab of the Home / Account & Settings administration page a custom “Terms of Service” page that is to be shown to each end user when he/she first log in to the system. It is necessary to accept this page in order to continue to the LMS”

• Consent import export Report an error

  “TalentLMS supports the granular importing/exporting of users based on a column “Terms”, provided that the respective domain has specified “Terms of Service”.”

• No automated decision making Report an error

  “TalentLMS by design fully respects the right of its users not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning him or her or similarly significantly affects him or her.”

• Custom reports user progress export Report an error

  “User progress can also be exported by using the custom reports feature of TalentLMS.”

Scores citing this record

• The Compliance Officer Reporting, learner data & works council
• The Compliance Officer Integrations, administration & portability
• The Compliance Officer European sovereignty
• The Customer Education Lead Compliance training, recertification & audit trail
• The Customer Education Lead Reporting, learner data & works council
• The Customer Education Lead Integrations, administration & portability
• The Customer Education Lead European sovereignty
• The IT & HR Systems Admin Courses, learning paths & content standards
• The IT & HR Systems Admin Compliance training, recertification & audit trail
• The IT & HR Systems Admin Reporting, learner data & works council
• The IT & HR Systems Admin Integrations, administration & portability
• The IT & HR Systems Admin European sovereignty
• The Onboarding Lead Courses, learning paths & content standards
• The Onboarding Lead Compliance training, recertification & audit trail
• The Onboarding Lead Reporting, learner data & works council
• The Onboarding Lead Integrations, administration & portability
• The Onboarding Lead European sovereignty
• The Skeptic Courses, learning paths & content standards
• The Skeptic Compliance training, recertification & audit trail
• The Skeptic Reporting, learner data & works council
• The Skeptic Integrations, administration & portability
• The Skeptic European sovereignty
• The Works Council Member Courses, learning paths & content standards
• The Works Council Member Compliance training, recertification & audit trail
• The Works Council Member Reporting, learner data & works council
• The Works Council Member Integrations, administration & portability
• The Works Council Member European sovereignty