Security First

Your data is protected at every level of virtual learning.

Updated 11-14-2024

Engageli Ensures Safe Collaboration and Learning

Our platform integrates enterprise-grade security, working seamlessly with your institution's infrastructure. All partner data is fully protected with secure data access controls.

 

Product Security 

 

Data Encryption in Transit and at Rest
Data is encrypted at rest using 256-bit AES for maximum protection. All data transmitted over the network is secured using HTTPS with TLS 1.2/1.3 protocols.

Authorization
Strict permission controls ensure that data access is limited to authorized individuals only. Only learners with verified access can enter an Engageli virtual classroom. If a learner's email address does not match the one on the class list, they will be unable to join the session, preventing unauthorized access.

Data Protection
Institution accounts are kept separate and secure in production environments, distinct from internal systems like development and testing instances. This separation enables Engageli to implement stringent access controls and auditing measures.

Penetration Test
In addition to regular internal scans, Engageli engages third-party security experts to conduct periodical penetration testing.

 

Operational Security 

 

Robust Datacenter

Data is stored in a secure, offsite cloud infrastructure that complies with SOC 2/3 standards. This data center is monitored 24/7, with access strictly limited to authorized individuals. Data backups are maintained in multiple secure locations to ensure redundancy and availability.

 

Security Policies

Engageli's security policies adhere to the NIST 800-53 framework and implement a Systems Development Life Cycle policy.

Robust Access Control

We enforce stringent measures to ensure that only authorized users can access learner information. Access to Engageli's production system is restricted based on a need-to-know basis and the principle of least privilege. Multi-factor authentication is required, and IP whitelisting provides an additional layer of security for production system access. Access logs are reviewed periodically.

Authentication

Engageli employs multi-factor authentication and single sign-on for business operations.

Human Security

All Engageli employees undergo necessary security training upon hiring and participate in ongoing training thereafter. Background checks are conducted during the hiring process.

 

Endpoint Security

All employee computers at Engageli are equipped with hard disk encryption, antivirus protection, and centralized monitoring.