Security at CyberSavi

How the platform is built, in plain terms:

• All traffic is encrypted in transit (TLS); data is encrypted at rest.
• Hosted on AWS in the United States, with each customer's data scoped to their own organization — tenant isolation is enforced in the application and covered by automated tests.
• Administrative actions — user changes, training assignments, force-passes, evidence exports — are recorded in an append-only audit log your admins can review and export.
• Sign-in supports Google and Microsoft SSO; passwords are stored only as hashes.

To be equally plain about what we don't claim: CyberSavi Academy is not yet SOC 2 certified. The product is built to help your organization produce evidence for SOC 2, HIPAA and NIST training requirements — that is a statement about your compliance program, not a certification of ours.

Security questions or disclosures: contact your CyberSavi representative.