Security and privacy

A boundary summary is not a certification.

Public trust centreProcurement document status

Institute review must identify data classes, identity and access, retention, incident routing, hosting and subcontractor status. The public page does not certify legal compliance or security controls.

public summarysecurity_overview

Security boundary overview

The public summary provides a review starting point. Exact architecture, data flows, retention, incidents, subprocessors and contractual obligations require current evidence and human review.

public summaryprivacy_data_map

Privacy and data-class boundary

The public summary provides a review starting point. Exact architecture, data flows, retention, incidents, subprocessors and contractual obligations require current evidence and human review.

Explicit non-claims

No ISO, SOC, DPDP, GDPR, legal-compliance, penetration-test, uptime, data-residency or production-security certification is asserted by this route.

Standing boundary

What we will not claim

These 13 are refused on every professional and institutional page. Asking for one of them is not a negotiation we can have on a website.

  • A customer's name without their written approval.
  • A number of deployments.
  • An outcome achieved by an institute.
  • A grading turnaround time.
  • A security certification.
  • A legal or compliance certification.
  • A public service-level agreement.
  • That a pilot is guaranteed.
  • That sales will reply instantly.
  • That a teacher is employed by us.
  • That we certify a professional.
  • That there is a reviewer marketplace.
  • A downloadable contract that nobody has reviewed.