Snapshot 144303
Raw (normalized text)
Scripts and page chrome removed; this is what change detection compares.
Skip to navigationSkip to main content D2L Trust Center D2L is committed to protecting the data our customers entrust to us. Our security and privacy programs are independently validated through ISO 27001, 27017, 27018, and 27701 certifications and an annual SOC 2 Type II examination. Use this Trust Center to review our certifications, request audit reports and security documentation. You can find additional information at: https://www.d2l.com/security/Opens in new tab. privacy@D2L.com Privacy PolicyOpens in new tab Filter by Compliance SOC 2 Type II ISO 27001:2022 ISO 27701:2019 ISO 27017:2015 ISO 27018:2019 UK Cyber Essentials 3.3 Trusted Cloud Provider (CSA) EU-U.S. Data Privacy Framework GDPR CCPA Resources View all Compliance Reports D2L SOC 2 Type II - 2026 ISO 27001.2022 - SOA View 3 more Questionnaires HECVAT - Brightspace HECVAT - Course Merchant D2L- CAIQv4.0.2 STAR Security QuestionnaireOpens in new tab HECVAT - H5P and Creator 2025 Architecture Diagrams Brightspace Architecture Course Merchant - Architecture Diagrams PCI PCI-DSS-v4-0-1-ROC-AOC - Course Merchant PCI Responsibility Matrix D2L Course Merchant Feb 2026 PCI-DSS-v4-0-1-AOC - H5P Other resources 2026 Penetration Test - Brightspace 2026 Penetration Test - Course Merchant 2026 Penetration Test - H5P 2026 Network Penetration Test Summary - Azure View 6 more Controls View all Infrastructure security Encryption key access restricted Production data segmented Production multi-availability zones established View 3 more Infrastructure security controls Organizational security Asset disposal procedures utilized Confidentiality Agreement acknowledged by employees Employee background checks performed View 3 more Organizational security controls Product security Data encryption utilized Penetration testing performed Vulnerability and system monitoring procedures established View 1 more Product security control Internal security procedures Access requests required Access reviews conducted Company commitments externally communicated View 11 more Internal security procedures controls Data and privacy Customer data deleted upon leaving Data classification policy established Data retention procedures established View 2 more Data and privacy controls Data collected Customer personally identifiable information Credit card information Personal health information Subprocessors View all D2L Subprocessors View D2L's subprocessors here - https://www.d2l.com/legal/d2ls-third-party-subprocessors/Opens in new tab AWS • Cloud Hosting Customer Location Dependent For Data storage: Customer Location Dependent AWS regions (including United States, Canada, Australia, Republic of Ireland, Singapore, India) For Data processing: Customer Location Dependent AWS regions and, for certain AI inference services, global AWS infrastructure Microsoft 365 • Internal Operations Canada Corporate Productivity & Business Operations Vanta • Internal Operations Trust Centre & Compliance Management FAQ View all Updates View all General Subscribe to Updates From D2L's Trust Center Published October 19, 2026 You can now subscribe to updates from D2L's Trust Center to be notified of any updates to our compliance and security program. We'll be communicating key information regarding new security documentation and overall development on our security roadmap.