Snapshot 127675
Normalized text
Scripts and page chrome removed; this is what change detection compares.
Contact Portflow Trust PortalPieter J. Smits2026-10-20T18:26:33+02:00 Security, Privacy, and Accessibility Portflow Trust Portal Self-service access to security, data privacy, and compliance documents and certifications This Portflow Trust Portal is your one-stop shop for information on Portflow’s commitment to security and compliance. Here, you’ll find the resources you need to evaluate Portflow as a trusted partner, whether you’re a potential customer or an existing one performing due diligence. Within this portal, you’ll have access to Third-Party Audit Reports (Independent verification of the security controls and practices in place for Portflow’s cloud-hosted services) and Compliance Documentation (details on how Portflow adheres to industry data protection standards and regulatory requirements). We encourage you to explore the portal and gain a comprehensive understanding of Portflow’s unwavering commitment to safeguarding your data and meeting your compliance needs. Quick Summary Annual third-party penetration testing Will enter into a DPA Deletes customer data on request Sub-processors list available One or more annual third-party audit(s) Has a disaster recovery plan Has cyber insurance Has a status page Compliance & Conformance Security & Privacy Privacy Policy Documents SOC2 Type II Report Annual audit of our security policies and practices Request access VPAT Accessibility Conformance Report (WCAG 2.2, level AA) Download directly HECVAT EDUCAUSE toolkit for assessing vendor security and data protection Request access Pentest Report Annual independent penetration test report Request access DPA Template Data Processing Agreement template Request access Cyber Essentials Certificate Access the Cyber Essentials certificate Direct access Frequently Asked Questions Where is Portflow hosted? Europe Production data: Ireland | eu-west-1 (AWS) Primary backup-data: Ireland | eu-west-1 (AWS) Secondary backup-data: Frankfurt, Germany | eu-central-1 (AWS) Australia Production data: Sydney | ap-southeast-2 (AWS) Primary backup-data: Sydney | ap-southeast-2 (AWS) Secondary backup-data: Melbourne | ap-southeast-4 (AWS) What integrations are available? LMS / VLE Canvas LMS by Instructure Brightspace by D2L Blackboard by Anthology Moodle Alumnus account Google OAuth Microsoft OAuth LinkedIn OAuth GitHub OAuth Evidence import Microsoft OneDrive Evidence embedding Canvas Studio Kaltura Panopto Vimeo YouTube Yuja Badges (OpenBadges 2.0/3.0) Accredible Brightspace Badges Canvas Badges (formerly Badgr) Credly Edubadges (SURFnet) Milestones (Anthology) Parchment (Digitary CORE) What is the back-up process? Portflow customers’ data is automatically backed up both in real time and on a 24-hour schedule across multiple geographical locations within the same continent, rather than in a single data centre. This enables Drieam to provide superior disaster recovery in the event of an outage. At all times, we aim to be able to restore a full backup within four hours. What is the RTO and RPO? Portflow adheres to a Recovery Time Objective (RTO) of 4 hours and a Recovery Point Objective (RPO) of 1 hour. How is data encrypted in transit? Data in transit is encrypted using SSL with TLS 1.3. This ensures that all communication between your browser and our servers and amongst our servers is fully secure, in line with SOC 2 level II requirements. How is data encrypted at rest? The data at rest stored in the databases is encrypted using AES-256 block-level storage encryption to ensure its confidentiality and integrity. We use robust security measures to ensure that only authorized users have access to the data, in line with SOC 2 level II requirements. How is user/management access authenticated? User and management access it authenticated through either 2-factor authentication (2FA) or identity federation with existing provider (SSO via LTI 1.3). Does Portflow use AI/LLMs - if so, how? Since the summer of 2024, Portflow introduced its first AI integration. This is an optional feature that can be enabled at the institution’s level by their administrators. This first AI feature allows users to create an analytic summary of received feedback on a goal. For this feature, Portflow uses the high-quality language model GPT 4.1 mini, offered through Microsoft Azure OpenAI Service, hosted in Europe. The integration and service ensures that there is no data transfer outside the EU, as well as that the prompt, input content (feedback), and outputs are not used to train or improve language models. In addition, user’s PII is not linked to the data sent to the AI service. More information on Microsoft Azure’s privacy and security can be found on Microsoft’s website. Portflow is Vetted & Trusted by Controls Firewall access restricted Intrusion detection system utilized Network firewalls utilized Network and system hardening standards maintained Log management utilized Data encryption utilized Password policy enforced Vulnerability and system monitoring procedures established Continuity and disaster recovery plans tested Incident response plan tested Development lifecycle established Whistleblower policy established System changes externally communicated Support system available Access reviews conducted Access requests required Production deployment access restricted Change management procedures enforced Risks assessments performed Data classification policy established Data retention procedures established Request documents After submitting the form below, we will send you an NDA. When you have signed the NDA, we will get back to you with the requested documents. Portflow resources The Student-Owned Learning & Assessment Portfolio Expertise Solutions Drieam Cookie Settings Empowering Learners, Propelling Employability Let’s talk! +1 (332) 208-1433 info@drieam.com © 2014 - 2026 | Drieam LLC Go to Top