GDPR & Security

ISO 27001 certified

Learnster is ISO 27001 certified, demonstrating compliance with internationally recognized standards for information security management.Security governance, risk management, and continuous improvement are embedded across our platform, infrastructure, and operational processes.

GDPR Compliance

Learnster processes all data in accordance with the General Data Protection Regulation (GDPR). Data is securely stored within the EU and encrypted using industry-standard encryption, with encryption keys exclusively controlled by Learnster. We do not rely on non-European sub-processors operating under the Privacy Shield framework.

Security testing

Security controls are continuously validated through structured testing processes. These include regular third-party penetration testing, web application security assessments, and automated dependency vulnerability scans to identify and remediate potential risks.

Data security and Encryption

Customer data is logically segregated throughout its lifecycle. All data is encrypted in transit and at rest. AES 256-bit encryption protects stored data, with encryption keys managed and controlled by Learnster.

Security by Design

Security is integrated into every phase of the development lifecycle — from initial risk assessment and architecture design to code review, testing, and deployment.Ongoing monitoring, vulnerability management, and secure development practices ensure consistent protection at scale.

WCAG 2.2 AA Compliant

Learnster complies with WCAG 2.2 AA accessibility standards. The platform is designed to support users with visual, motor, and cognitive impairments, ensuring compliance with EU accessibility requirements and equal access across the organization.