FAQ
Security & compliance
Where is learner data hosted?
Data residency is one of the first questions information governance teams ask, and the answer is short: UK only.
Where the data sits
All hosting is on AWS in the London region (eu-west-2). Backups are encrypted and replicated across multiple availability zones, all within the UK, so no customer data leaves UK jurisdiction at any point.
How it is protected
- AES-256 encryption at rest for all stored data
- TLS 1.2 or higher for all data in transit
- Encryption keys managed through AWS KMS with rotation policies
- Learner data never used to train AI models
Getting it in writing
For a procurement submission, request the security pack and confirm the current position in writing rather than relying on a web page. Your organisation can export or delete its data at any time.