Data Security
Special Education Compliance and Training LLC, through its
online school, Special Education Training Center data security is provided by our
Learning Management System (LMS). The Learning Management System provides the
following measures for securely storing
the data you entrusted to us:
Protection from Data Loss
& Data Corruption
Isolated Databases
Special Education Compliance and Training LLC’s online
school, Special Education Training Center, data security is provided through our
Learning Management System, and it has an isolated Database.
This means that even if a School gets compromised or goes rogue, all other Special Education Training Centers’ data will remain unaffected. Regular Backups Databases are mirrored and backed up off-site, across multiple facilities.
Our learning management system keep daily database backups. Customer Data Regulation Special Education Compliance and Training’s online school, Special Education Training Center, through its learning management system will never move the online school or user data outside of our learning management system secured environment for testing or any other reason. Application Level Security Password Salting and Hashing Special Education Compliance and Training LLC its online school, Special Education Training Center’s learning management system uses the most up-to-date and secure cryptographic methods. School Admin Passwords are salted and hashed and never stored or transmitted as plain text.
Employees/Consultants/Subcontractors cannot view or manually change passwords. If a User/Users forget their password it cannot be retrieved, even by Special Education Compliance and Training LLC and/or Special Education Training Center. The User/Users the password must be reset by the User/Users. Encrypted Data Storage Special Education Training Center’s User/Users password/s are salted and hashed and never stored or transmitted as plain text. HTTPS everywhere Special Education Compliance and Training LLC, its online school Special Education Training Center, through the learning management system forces all requests over HTTPS, ensuring all traffic between the online, Special Education Training Center and the user/’s browser is encrypted. This means that anyone trying to eavesdrop on this data will not be able to decrypt and access the underlying data.
Special Education Compliance and Training LLC, online school, Special Education Training Centers on-line school powered by our learning management system is a free SSL certificate for lifetime.
Our learning management system uses TLS 1.2 exclusively, throughout its site and subdomains. XSS vulnerability avoidance All user inputs are properly treated to ensure that XSS vulnerabilities are avoided. Credit Cards and PCI Compliance Special Education Compliance and Training LLC, its online school Special Education Training Center, through the learning management prioritizes the security of our User/s payment information by adhering to PCI-DSS (Payment Card Industry Data Security Standard) guidelines. This ensures that all credit card transactions are handled securely, helping to protect sensitive data and prevent fraud.
Special Education Compliance and Training LLC, its online school Special Education Training Center, does not store, process, or transmit any credit card information. Instead, Special Education Compliance and Training LLC, its on-line school, Special Education Training Center, relies on our learning management system it is a trusted payment gateway providers, such as Stripe and PayPal, to manage all credit card data securely. These providers are PCI DSS Level 1 Service Providers—the highest level of compliance—which means they meet the stringent security standards set by the PCI Security Standards Council, a joint effort by major credit card companies like Visa, MasterCard, American Express, and Discover.
Special Education Compliance and Training LLC through its on-line school Special Education Training Center’s learning management system ensures that all transactions conducted through Special Education Compliance and Training LLC through its on-line school Special Education Training Center learning management system on-line school platform are secure.
Secure Software Development Life Cycle Vulnerability Scanning & Patching Special Education Compliance and Training LLC through its on-line school Special Education Training Center’s learning management system the automated systems is in place to monitor all the software infrastructure that powers the learning management system’s company new versions and vulnerabilities. Special Education Compliance and Training LLC through its on-line school Special Education Training Center’s learning management system infrastructure is updated regularly with the latest security patches.
Special Education Compliance and Training LLC through its on-line school Special Education Training Center’s learning management system in-house security expert/s are constantly on the lookout for things that could jeopardize the learning management systems, ready to intervene. Special Education Compliance and Training LLC, through its on-line school Special Education Training Center’s learning management system has/will test the learning management system/s regularly through simulated attacks from the outside and in. Secure File Storage User/s uploaded files can only be accessed through our learning management system. Instructor/Presenters User/s can only access files intended for them. Only Special Education Compliance and Training LLC’s owner is authorized can access User/s' files, on a strict per-need basis.
Special Education Compliance and Training LLC’s Staff/Consultants/Subcontractors will not have access to User/s' data, only their ability to create professional development of training and resource materials, except in certain incidents. Internal Controls Special Education Compliance and Training LLC’s Staff/Consultants/Subcontractors access rights must be approved by Special Education Compliance and Training LLC’s Founder/Owner and levels are based on job function and role, on a need-to-know basis, and match defined responsibilities.
Special Education Compliance and Training LLC’s Staff/Consultants/Subcontractors must abide by our policies about protecting User/s' data. Security by Design Special Education Compliance and Training LLC through its on-line school Special Education Training Center’s learning management system “Security by Design” (often also called “Secure by Design”) is an architectural and development philosophy that embeds security into a system from its earliest stages, instead of bolting it on later. Our learning management system has built a platform so that its data, infrastructure, user‐access, payments, backups, etc., are all structured from the ground up with strong security‐principles, rather than simply adding a few security features as an afterthought.
The learning management system applies it the following ways:
1. Data Isolation & Backup. a) Special Education Compliance and Training LLC, through its on-line school Special Education Training Center’s learning management system platform, is its own isolated database. b) If Special Education Compliance and Training LLC through its on-line school Special Education Training Center’s learning management system is compromised, that isolation helps prevent cross-pollination of breach risk. c) Databases are mirrored and backed up off‐site across multiple facilities; daily backups are maintained. d) Special Education Compliance and Training LLC through its on-line school Special Education Training Center’s learning management system data is never moved outside the secured environment for testing or other non-production purposes.
2. Application & Infrastructure Security 1. Special Education Compliance and Training LLC through its on-line school Special Education Training Center’s learning management system passwords are salted and hashed; the learning management system never stores or transmitted in plain text. 2. All traffic between Special Education Compliance and Training LLC through its on-line school Special Education Training Center’s learning management system/User/s browsers and the platform is encrypted via TLS/HTTPS; Special Education Compliance and Training LLC through its on-line school Special Education Training Center’s learning management system uses TLS 1.2 exclusively. 3. Special Education Compliance and Training LLC through its on-line school Special Education Training Center’s learning management system Inputs are sanitized to prevent XSS vulnerabilities. 4. Special Education Compliance and Training LLC through its on-line school Special Education Training Center’s learning management system maintains an automated system to monitor for vulnerabilities, apply patches, and regularly test via simulated attacks. 3. Access Controls & Multi‐Factor Security 1. Special Education Compliance and Training LLC through its on-line school Special Education Training Center’s learning management system platform, supports and encourages 2-Factor Authentication (2FA) for user/s accounts (excluding perhaps some owner roles) to add that extra layer of account access security. 2. Special Education Compliance and Training LLC through its on-line school Special Education Training Center’s learning management system, uses features to verify user/s email addresses at signup, use of reCAPTCHA to block bots/fake signups, and strong password‐requirements for user accounts. 3. Special Education Compliance and Training LLC through its on-line school Special Education Training Center’s learning management system, has role‐based user permissions: 4. Special Education Compliance and Training LLC through its on-line school Special Education Training Center’s learning management system can restrict who has access to what parts of the online school Special Education Training Center’s (designers, instructors, seat managers, etc.), so that only the minimal‐needed privileges are given and then revoked when that level of access is no longer required and/or needed. 4. Content Protection & Anti‐Piracy 1. For uploaded PDFs/videos/ebooks, Special Education Compliance and Training LLC through its on-line school Special Education Training Center’s learning management system offers watermarking (user/s email or user/s ID, school name/logo) and options to disable download/copy/print, domain-restricted video/PDF access. 5. Data Processing, Legal & Compliance 1. Special Education Compliance and Training LLC through its on-line school Special Education Training Center’s learning management system provides a Data Processing Agreement (DPA) which lays out obligations around processing personal data per the General Data Protection Regulation (GDPR) and other relevant laws. a) Special Education Compliance and Training LLC through its on-line school Special Education Training Center’s learning management system, Privacy Policy also explains how personal data is collected and handled. b) Special Education Compliance and Training LLC through its on-line school Special Education Training Center’s learning management system has platform choice and built-in security architecture. User/s are not responsible for building fundamental infrastructure security, usage, and its use. c) Special Education Compliance and Training LLC through its on-line school Special Education Training Center’s learning management system has configurations matter, the out-of-box security is solid. d) Special Education Compliance and Training LLC through its on-line school Special Education Training Center’s learning management system enable/configure the strong features (2FA, role permissions, email verification, watermarking, downloads off/not off etc.)and if there are any leave defaults (e.g., no 2FA, broad‐role access, allow downloads), you expose risk. e) Special Education Compliance and Training LLC through its on-line school Special Education Training Center’s learning management system has segregation of duties, supports role permissions, aligns with internal SOPs (e.g., content creators only access course content, billing team only access billing dashboards, etc.) and the system supports consultants and subcontractors. f) Special Education Compliance and Training LLC through its on-line school Special Education Training Center’s learning management system has data retention/deletion abilities in handling instructor/consultant/subcontractor prep user/s data, user/s/internal‐tracking data, confirmation of long data is retained, data backed up, and the process for deleting data, supporting DPA, and the operational process. g) Special Education Compliance and Training LLC through its on-line school Special Education Training Center’s learning management system content protection, protection for selling or hosting proprietary modules, watermarks, controlling downloads, and domain restrictions in place to minimize unauthorized sharing. h) Special Education Compliance and Training LLC through its on-line school Special Education Training Center’s learning management system has legal/regulatory compliance, supports prep work (reporting, data on candidates, perhaps minors involved), protection of configuration aligns with the Special Education Compliance and Training LLC through its on-line school Special Education Training Center’s learning management system, compliance needs (e.g., student data protections, TEA standards). i) Special Education Compliance and Training LLC through its on-line school Special Education Training Center’s learning management system has risk management, in-place defenses, internal review/s, open access, protective data being stored, secured admin devices, training team/s (phishing, etc.), and keeping in place the human factor. 6. Key Management a. Special Education Compliance and Training LLC through its on-line school Special Education Training Center’s learning management system has keys secret and out of version control, to ensure access to critical resources cannot be compromised. 7. Data Center Security a) Special Education Compliance and Training LLC through its on-line school Special Education Training Center’s learning management system implements GDPR requirement controllers and processors of personal data to “implement appropriate technical and organizational” measures to ensure a sufficient level of security. 8. Special Education Compliance and Training LLC through its on-line school Special Education Training Center’s learning management system is a Google Cloud partner, uses top-notch Google Cloud Platform servers as our third-party cloud storage subcontractor, and Special Education Compliance and Training LLC does not store user/s data on our premises. 9. Special Education Compliance and Training LLC through its on-line school Special Education Training Center’s learning management system company states this means that all our servers are located at Google premises, in different world-class data centers around the world: a) East USA (South Carolina & Virginia, USA, North America) b) Central EU (Frankfurt, Germany, Europe) c) South America (São Paulo, Brazil, South America) d) Southeast Asia (Singapore, APAC) 10. Special Education Compliance and Training LLC through its on-line school Special Education Training Center’s learning management system uses Google Cloud Platform. The platform is a leading cloud provider, and holds industry best security certifications, such as SOC2/3 and ISO27001, and provides encryption in transit and at rest, without any action required from our customers. 11. Our learning management system company servers are protected by biometric locks and round-the-clock interior and exterior surveillance monitoring. Only authorized personnel have access to the data center. 24/7/365 onsite staff provides additional protection against unauthorized entry and security breaches. 12. Special Education Compliance and Training LLC through its on-line school Special Education Training Center’s learning management system, has high availability. 13. Special Education Compliance and Training LLC, through its on-line school Special Education Training Center’s learning management system company ensures high availability throughout the platform at every layer of the stack, has a suite of contingency mechanisms, automatic failover, and ensures 24/7 application availability. 14. Special Education Compliance and Training LLC through its on-line school Special Education Training Center’s learning management system company protects the online school against rogue or hacked users. 15. Special Education Compliance and Training LLC through its on-line school Special Education Training Center’s learning management system company monitors and will automatically suspend accounts for signs of irregular, suspicious login activity, changes in the user/s account, such as to your password, trigger email notifications to the account user/s, monitoring accounts and Special Education Training Center activity for signs of abuse (both via automatic notifications and human reviewers). Disclosure Special Education Compliance and Training LLC through its on-line school Special Education Training Center’s learning management system company is working continuously to make sure the learning management system systems secure. Daily monitoring of modern software, which are complex artefact created by humans and cybersecurity is monitored. Special Education Compliance and Training LLC, through its on-line school, Special Education Training Center’s learning management system company monitors the entire online school. If a user/s does find any security issues, whether from a user/s or security expert, please reach out to Special Education Compliance and Training LLC at setcbusiness@gmail.com
This means that even if a School gets compromised or goes rogue, all other Special Education Training Centers’ data will remain unaffected. Regular Backups Databases are mirrored and backed up off-site, across multiple facilities.
Our learning management system keep daily database backups. Customer Data Regulation Special Education Compliance and Training’s online school, Special Education Training Center, through its learning management system will never move the online school or user data outside of our learning management system secured environment for testing or any other reason. Application Level Security Password Salting and Hashing Special Education Compliance and Training LLC its online school, Special Education Training Center’s learning management system uses the most up-to-date and secure cryptographic methods. School Admin Passwords are salted and hashed and never stored or transmitted as plain text.
Employees/Consultants/Subcontractors cannot view or manually change passwords. If a User/Users forget their password it cannot be retrieved, even by Special Education Compliance and Training LLC and/or Special Education Training Center. The User/Users the password must be reset by the User/Users. Encrypted Data Storage Special Education Training Center’s User/Users password/s are salted and hashed and never stored or transmitted as plain text. HTTPS everywhere Special Education Compliance and Training LLC, its online school Special Education Training Center, through the learning management system forces all requests over HTTPS, ensuring all traffic between the online, Special Education Training Center and the user/’s browser is encrypted. This means that anyone trying to eavesdrop on this data will not be able to decrypt and access the underlying data.
Special Education Compliance and Training LLC, online school, Special Education Training Centers on-line school powered by our learning management system is a free SSL certificate for lifetime.
Our learning management system uses TLS 1.2 exclusively, throughout its site and subdomains. XSS vulnerability avoidance All user inputs are properly treated to ensure that XSS vulnerabilities are avoided. Credit Cards and PCI Compliance Special Education Compliance and Training LLC, its online school Special Education Training Center, through the learning management prioritizes the security of our User/s payment information by adhering to PCI-DSS (Payment Card Industry Data Security Standard) guidelines. This ensures that all credit card transactions are handled securely, helping to protect sensitive data and prevent fraud.
Special Education Compliance and Training LLC, its online school Special Education Training Center, does not store, process, or transmit any credit card information. Instead, Special Education Compliance and Training LLC, its on-line school, Special Education Training Center, relies on our learning management system it is a trusted payment gateway providers, such as Stripe and PayPal, to manage all credit card data securely. These providers are PCI DSS Level 1 Service Providers—the highest level of compliance—which means they meet the stringent security standards set by the PCI Security Standards Council, a joint effort by major credit card companies like Visa, MasterCard, American Express, and Discover.
Special Education Compliance and Training LLC through its on-line school Special Education Training Center’s learning management system ensures that all transactions conducted through Special Education Compliance and Training LLC through its on-line school Special Education Training Center learning management system on-line school platform are secure.
Secure Software Development Life Cycle Vulnerability Scanning & Patching Special Education Compliance and Training LLC through its on-line school Special Education Training Center’s learning management system the automated systems is in place to monitor all the software infrastructure that powers the learning management system’s company new versions and vulnerabilities. Special Education Compliance and Training LLC through its on-line school Special Education Training Center’s learning management system infrastructure is updated regularly with the latest security patches.
Special Education Compliance and Training LLC through its on-line school Special Education Training Center’s learning management system in-house security expert/s are constantly on the lookout for things that could jeopardize the learning management systems, ready to intervene. Special Education Compliance and Training LLC, through its on-line school Special Education Training Center’s learning management system has/will test the learning management system/s regularly through simulated attacks from the outside and in. Secure File Storage User/s uploaded files can only be accessed through our learning management system. Instructor/Presenters User/s can only access files intended for them. Only Special Education Compliance and Training LLC’s owner is authorized can access User/s' files, on a strict per-need basis.
Special Education Compliance and Training LLC’s Staff/Consultants/Subcontractors will not have access to User/s' data, only their ability to create professional development of training and resource materials, except in certain incidents. Internal Controls Special Education Compliance and Training LLC’s Staff/Consultants/Subcontractors access rights must be approved by Special Education Compliance and Training LLC’s Founder/Owner and levels are based on job function and role, on a need-to-know basis, and match defined responsibilities.
Special Education Compliance and Training LLC’s Staff/Consultants/Subcontractors must abide by our policies about protecting User/s' data. Security by Design Special Education Compliance and Training LLC through its on-line school Special Education Training Center’s learning management system “Security by Design” (often also called “Secure by Design”) is an architectural and development philosophy that embeds security into a system from its earliest stages, instead of bolting it on later. Our learning management system has built a platform so that its data, infrastructure, user‐access, payments, backups, etc., are all structured from the ground up with strong security‐principles, rather than simply adding a few security features as an afterthought.
The learning management system applies it the following ways:
1. Data Isolation & Backup. a) Special Education Compliance and Training LLC, through its on-line school Special Education Training Center’s learning management system platform, is its own isolated database. b) If Special Education Compliance and Training LLC through its on-line school Special Education Training Center’s learning management system is compromised, that isolation helps prevent cross-pollination of breach risk. c) Databases are mirrored and backed up off‐site across multiple facilities; daily backups are maintained. d) Special Education Compliance and Training LLC through its on-line school Special Education Training Center’s learning management system data is never moved outside the secured environment for testing or other non-production purposes.
2. Application & Infrastructure Security 1. Special Education Compliance and Training LLC through its on-line school Special Education Training Center’s learning management system passwords are salted and hashed; the learning management system never stores or transmitted in plain text. 2. All traffic between Special Education Compliance and Training LLC through its on-line school Special Education Training Center’s learning management system/User/s browsers and the platform is encrypted via TLS/HTTPS; Special Education Compliance and Training LLC through its on-line school Special Education Training Center’s learning management system uses TLS 1.2 exclusively. 3. Special Education Compliance and Training LLC through its on-line school Special Education Training Center’s learning management system Inputs are sanitized to prevent XSS vulnerabilities. 4. Special Education Compliance and Training LLC through its on-line school Special Education Training Center’s learning management system maintains an automated system to monitor for vulnerabilities, apply patches, and regularly test via simulated attacks. 3. Access Controls & Multi‐Factor Security 1. Special Education Compliance and Training LLC through its on-line school Special Education Training Center’s learning management system platform, supports and encourages 2-Factor Authentication (2FA) for user/s accounts (excluding perhaps some owner roles) to add that extra layer of account access security. 2. Special Education Compliance and Training LLC through its on-line school Special Education Training Center’s learning management system, uses features to verify user/s email addresses at signup, use of reCAPTCHA to block bots/fake signups, and strong password‐requirements for user accounts. 3. Special Education Compliance and Training LLC through its on-line school Special Education Training Center’s learning management system, has role‐based user permissions: 4. Special Education Compliance and Training LLC through its on-line school Special Education Training Center’s learning management system can restrict who has access to what parts of the online school Special Education Training Center’s (designers, instructors, seat managers, etc.), so that only the minimal‐needed privileges are given and then revoked when that level of access is no longer required and/or needed. 4. Content Protection & Anti‐Piracy 1. For uploaded PDFs/videos/ebooks, Special Education Compliance and Training LLC through its on-line school Special Education Training Center’s learning management system offers watermarking (user/s email or user/s ID, school name/logo) and options to disable download/copy/print, domain-restricted video/PDF access. 5. Data Processing, Legal & Compliance 1. Special Education Compliance and Training LLC through its on-line school Special Education Training Center’s learning management system provides a Data Processing Agreement (DPA) which lays out obligations around processing personal data per the General Data Protection Regulation (GDPR) and other relevant laws. a) Special Education Compliance and Training LLC through its on-line school Special Education Training Center’s learning management system, Privacy Policy also explains how personal data is collected and handled. b) Special Education Compliance and Training LLC through its on-line school Special Education Training Center’s learning management system has platform choice and built-in security architecture. User/s are not responsible for building fundamental infrastructure security, usage, and its use. c) Special Education Compliance and Training LLC through its on-line school Special Education Training Center’s learning management system has configurations matter, the out-of-box security is solid. d) Special Education Compliance and Training LLC through its on-line school Special Education Training Center’s learning management system enable/configure the strong features (2FA, role permissions, email verification, watermarking, downloads off/not off etc.)and if there are any leave defaults (e.g., no 2FA, broad‐role access, allow downloads), you expose risk. e) Special Education Compliance and Training LLC through its on-line school Special Education Training Center’s learning management system has segregation of duties, supports role permissions, aligns with internal SOPs (e.g., content creators only access course content, billing team only access billing dashboards, etc.) and the system supports consultants and subcontractors. f) Special Education Compliance and Training LLC through its on-line school Special Education Training Center’s learning management system has data retention/deletion abilities in handling instructor/consultant/subcontractor prep user/s data, user/s/internal‐tracking data, confirmation of long data is retained, data backed up, and the process for deleting data, supporting DPA, and the operational process. g) Special Education Compliance and Training LLC through its on-line school Special Education Training Center’s learning management system content protection, protection for selling or hosting proprietary modules, watermarks, controlling downloads, and domain restrictions in place to minimize unauthorized sharing. h) Special Education Compliance and Training LLC through its on-line school Special Education Training Center’s learning management system has legal/regulatory compliance, supports prep work (reporting, data on candidates, perhaps minors involved), protection of configuration aligns with the Special Education Compliance and Training LLC through its on-line school Special Education Training Center’s learning management system, compliance needs (e.g., student data protections, TEA standards). i) Special Education Compliance and Training LLC through its on-line school Special Education Training Center’s learning management system has risk management, in-place defenses, internal review/s, open access, protective data being stored, secured admin devices, training team/s (phishing, etc.), and keeping in place the human factor. 6. Key Management a. Special Education Compliance and Training LLC through its on-line school Special Education Training Center’s learning management system has keys secret and out of version control, to ensure access to critical resources cannot be compromised. 7. Data Center Security a) Special Education Compliance and Training LLC through its on-line school Special Education Training Center’s learning management system implements GDPR requirement controllers and processors of personal data to “implement appropriate technical and organizational” measures to ensure a sufficient level of security. 8. Special Education Compliance and Training LLC through its on-line school Special Education Training Center’s learning management system is a Google Cloud partner, uses top-notch Google Cloud Platform servers as our third-party cloud storage subcontractor, and Special Education Compliance and Training LLC does not store user/s data on our premises. 9. Special Education Compliance and Training LLC through its on-line school Special Education Training Center’s learning management system company states this means that all our servers are located at Google premises, in different world-class data centers around the world: a) East USA (South Carolina & Virginia, USA, North America) b) Central EU (Frankfurt, Germany, Europe) c) South America (São Paulo, Brazil, South America) d) Southeast Asia (Singapore, APAC) 10. Special Education Compliance and Training LLC through its on-line school Special Education Training Center’s learning management system uses Google Cloud Platform. The platform is a leading cloud provider, and holds industry best security certifications, such as SOC2/3 and ISO27001, and provides encryption in transit and at rest, without any action required from our customers. 11. Our learning management system company servers are protected by biometric locks and round-the-clock interior and exterior surveillance monitoring. Only authorized personnel have access to the data center. 24/7/365 onsite staff provides additional protection against unauthorized entry and security breaches. 12. Special Education Compliance and Training LLC through its on-line school Special Education Training Center’s learning management system, has high availability. 13. Special Education Compliance and Training LLC, through its on-line school Special Education Training Center’s learning management system company ensures high availability throughout the platform at every layer of the stack, has a suite of contingency mechanisms, automatic failover, and ensures 24/7 application availability. 14. Special Education Compliance and Training LLC through its on-line school Special Education Training Center’s learning management system company protects the online school against rogue or hacked users. 15. Special Education Compliance and Training LLC through its on-line school Special Education Training Center’s learning management system company monitors and will automatically suspend accounts for signs of irregular, suspicious login activity, changes in the user/s account, such as to your password, trigger email notifications to the account user/s, monitoring accounts and Special Education Training Center activity for signs of abuse (both via automatic notifications and human reviewers). Disclosure Special Education Compliance and Training LLC through its on-line school Special Education Training Center’s learning management system company is working continuously to make sure the learning management system systems secure. Daily monitoring of modern software, which are complex artefact created by humans and cybersecurity is monitored. Special Education Compliance and Training LLC, through its on-line school, Special Education Training Center’s learning management system company monitors the entire online school. If a user/s does find any security issues, whether from a user/s or security expert, please reach out to Special Education Compliance and Training LLC at setcbusiness@gmail.com