Trust Center
Security, compliance and responsible AI — by design.
LearnStreams LLC operates under independently certified management systems for information security and quality. Our platform is built to meet the requirements of GDPR and the EU AI Act, and every AI-supported function remains under human oversight.
Certifications & compliance
Independently certified. Formally governed.
ISO/IEC 27001
Information Security Management System
Certified ISMS covering the design, development, hosting and support of the LearnStreams platform and PIKO proctoring.
✓ In effectISO 9001
Quality Management System
Certified QMS governing product development, release management, service delivery and customer support.
✓ In effectEU AI Act
Artificial Intelligence Regulation (EU) 2024/1689
AI functionality is classified, documented and governed in accordance with the obligations of the AI Act.
✓ In effectGDPR
General Data Protection Regulation (EU) 2016/679
Personal data is processed lawfully under a Data Processing Agreement, with defined retention and data-subject rights.
✓ In effectInformation security
Controls that protect every examination.
Encryption
Data is encrypted in transit using TLS 1.2 or higher and at rest using AES-256.
Access control
Role-based permissions, single sign-on (SAML 2.0, OIDC), multi-factor authentication and least-privilege administrative access.
Audit logging
Administrative, grading and certification actions are recorded in tamper-evident audit logs.
Data residency
Customer data is hosted in the agreed region. Private cloud and on-premises deployments remain within the customer's infrastructure.
Business continuity
Automated backups, documented recovery procedures and defined recovery time and recovery point objectives.
Vulnerability management
Continuous dependency scanning, secure development practices and periodic independent penetration testing.
SaaS
Hosted and operated by LearnStreams under ISO/IEC 27001 controls.
Private Cloud
Dedicated environment within the agreed provider and region.
On-Premises
Deployed within the customer's infrastructure under defined responsibilities.
Responsible AI · EU AI Act
AI that supports decisions — never replaces them.
LearnStreams applies AI to proctoring, question authoring and analytics in accordance with Regulation (EU) 2024/1689. The following principles are binding for every AI-supported feature.
Human oversight
AI does not make final decisions on candidates. Proctoring flags, scoring suggestions and content proposals are always subject to review by an authorised person.
Transparency
Candidates are informed when AI-supported features are in use, what data they process and for what purpose.
Risk classification
Each AI feature is assessed against the risk categories of the EU AI Act, with technical documentation and risk-management records maintained accordingly.
Data governance
Customer data is not used to train general-purpose AI models. AI features can be enabled or disabled per organization.
Fairness & accuracy
AI-supported functions are monitored for accuracy and bias, with documented testing prior to release.
Accountability
A designated governance function reviews AI features, incidents and changes on a defined schedule.
Documentation
Evidence available on request.
- PDFISO/IEC 27001 certificate
- PDFISO 9001 certificate
- PDFData Processing Agreement (DPA)
- PDFList of sub-processors
- PDFAI Act technical documentation summary
- PDFSecurity questionnaire (CAIQ / SIG)
- PDFPenetration test summary
- PDFBusiness continuity overview