Security & compliance

Evidence your auditor will accept.

Every completion, quiz attempt and SOP acknowledgement is time-stamped, versioned and attributable to a named user. Records are immutable once written.

ISO
ISO 27001
Certified · placeholder
SOC 2
SOC 2 Type II
Report available on request
GDPR
GDPR ready
EU data residency option
21 CFR
21 CFR Part 11
Electronic records & signatures
Records

Immutable completion evidence

Completions, quiz attempts and acknowledgements are written once with user, timestamp, content version and score. Corrections are appended, never overwritten.

Versioning

Every training and SOP is versioned

A report shows exactly which version each employee completed. New versions can require re-training or re-acknowledgement.

Access

Role-based access per module

Roles, user role mapping and access rights control who can view, edit or approve in each module. SSO and SCIM on Enterprise.

Data

Tenant isolation and encryption

Each customer runs in an isolated tenant. Data is encrypted in transit and at rest, with EU or India residency options.

Approvals

Four-eyes on the things that matter

Workflow rules require sign-off before publishing a training, changing a pass mark or releasing an SOP version.

Continuity

Backups and uptime

Point-in-time recovery and daily off-site backups keep records available on audit day.

What an audit export contains

✓Employee, job role, department and location at time of completion
✓Training title, version and content items viewed
✓Quiz attempts with score, pass/fail and time taken
✓SOP acknowledgements with document version
✓Assigned-by, assigned-on and due date
✓Trainer and approver sign-offs
✓In-video questions, hotspots and activity responses with timestamps
✓Export metadata: who ran it, filters applied, record count and checksum
Request the security pack

Walk through the evidence trail with your own SOPs.

30-minute session with a solutions consultant. Bring an SOP and a recent auditor request; see how the export would answer it.

Book a demo