Security and GDPR

Data in the EU and role-based access

An LMS holds information about your employees. That is why the data is stored in the EU, access is controlled by roles, and you can always see who did what.

How we look after data

Security in everyday use

Hosting in the EU

Activate LMS runs in Microsoft Azure in a data centre in the Netherlands.

Access by role

Administrators, managers and course owners only see what their role gives them access to, also in reports and exports.

Log of changes

The system log shows who created, changed or deleted something, and what the system has done.

Single sign-on

Let employees log in with their work account, so your own rules for passwords and two-factor authentication apply.

Backup

The database is backed up regularly, and we take an extra copy before major updates.

AI in the EU

The AI assistant runs at Mistral in the EU, is turned off by default, and your data is not used for training.

GDPR

Data processing and the data processing agreement

We are the data processor for the information you put into the LMS. The privacy policy and the data processing agreement describe what we do with it and which sub-processors we use.

  • A data processing agreement with every customer.
  • Users who are deleted are also removed from reports and evaluations.
  • Course evaluations are anonymous, also to administrators.
Privacy policy and data processing (in Danish)
Questions and answers

About security

Where is our data stored?

In Microsoft Azure in a data centre in the Netherlands, so within the EU.

Do we get a data processing agreement?

Yes. Contact us if you need your own version or a list of sub-processors.

Can we get our data out if we leave?

Yes. Users and results can be exported, and your e-learning is SCORM, so it can be moved to another LMS.

Questions about IT security?

Send them to us. We are happy to answer security questionnaires and to meet with you or your IT department.