Your training data in trusted hands
Certificates, assessments and personal data are sensitive information. That is why information security at Emmedy is not a project, but an ongoing process.
ISO 27001 certified since 2024
Information security in line with ISO 27001:2022, with annual external audits. We share the certificate and statement of applicability on request.
How we protect your data
ISO 27001
Our information security management system is certified and audited externally every year.
Hosting in the EU
The platform runs in European data centres, on a scalable and controlled Kubernetes platform.
SSO and SCIM
Log in via your own identity management; users are created and removed automatically.
Roles and permissions
Function-based permissions, also set up with NIS2 in mind.
Audit trail
Changes to results are traceable. More extensive audit logging is in development.
Retention periodsin development
Retention periods per organisation across Learn, Plan and Flow are being set up centrally.
GDPR: what is yours, stays yours
Your organisation owns the data; Emmedy processes it on your behalf. We sign a data processing agreement that records where data is stored, who can access it and what happens when the cooperation ends.
With AI too: human expertise remains leading, and we are open about where and how AI is used.
Frequently asked questions
Question not listed? We are happy to answer it personally.
Yes. On request we share the certificate and statement of applicability for a tender or procurement process.
In data centres within the European Union. The exact locations are included in the data processing agreement.
Via our security address (see contact). We take every report seriously and let you know what we do with it.
No, not without an explicit agreement. Use of AI and data processing are recorded in the agreement.
Keep reading
See how it works in your practice?
In a 45-minute demo we show Emmedy using your own training programmes, roles and certificates. No standard pitch, just your situation.