Snapshot 184574
Normalized text
Scripts and page chrome removed; this is what change detection compares.
OpenSesame Trust Center Start your security review View & download sensitive information Ask for information Overview This page outlines the high-level details of the different frameworks, regulations, and certifications that apply to our company as well as specific resources for services that OpenSesame offers. OpenSesame has been the world’s leading marketplace for buying and selling e-learning courses since 2011, with buyers having access to the broadest and freshest selection of e-learning content from a global resource of industry-leading publishers all in one location. OpenSesame maps curated courses based on your business’ core requirements, syncing them with your LMS to increase utilization and continuously improve your Learning and Development programs. All OpenSesame content is SCORM/ AICC compliant and will work on any LMS. Data privacy and security is paramount at OpenSesame, and we hold security, confidentiality, and availability of our systems in the highest regard - to this end we have invested in Security, GRC, and Privacy programs. Our team is committed to safeguarding your data against potential threats and we are excited to share an overview of how we do that on this page! For further information please reach out to your sales representative, Customer Success Manager at sales@opensesame.com Compliance GDPR ISO/IEC 27001 ISO/IEC 27001 SoA ISO/IEC 27701 SOC 2 SOC 2 Type 2 OpenSesame is reviewed and trusted by A-LIGN Eden Data Documents Featured Documents REPORTSSecurity Whitepaper COMPLIANCEISO/IEC 27001 COMPLIANCEISO/IEC 27001 SoA COMPLIANCEISO/IEC 27701 COMPLIANCESOC 2 Type 2 POLICIESInformation Security Policy LEGALTechnical and Organizational Measures LEGALData Processing Agreement LEGALCyber Insurance AIAI Safe and Responsible Use Risk Profile Third Party DependenceYes HostingMajor Cloud Provider Recovery Time Objective24 hours View more Product Security Audit Logging Data Security Multi-Factor Authentication View more Reports Network Diagram Pentest Report SOC 2 Report View more Data Security Access Monitoring Data Backups Data Erasure View more App Security Software Development Lifecycle Vulnerability & Patch Management Web Application Firewall View more AI AI Overview AI Security AI Monitoring View more ESG Anti-Bribery and Corruption Code of Ethics Effective Board Oversight View more Legal Technical and Organizational Measures Subprocessors Cyber Insurance View more Data Privacy Cookies Data Breach Notifications Data Into System View more Access Control Data Access Logging Password Security View more Infrastructure Amazon Web Services Anti-DDoS BC/DR View more Endpoint Security Disk Encryption DNS Filtering Endpoint Detection & Response View more Network Security Data Loss Prevention Firewall IDS/IPS View more Corporate Security Asset Management Practices Email Protection Human Resources Security View more Policies Acceptable Use Policy Access Control Policy Anti-Malicious Software Policy View more Incident Response Designated Response Personnel Incident Reporting Process Pager Service View more Risk Management Data Access/Impact Levels Risk Assessments Supply Chain Risk Management View more Asset Management Asset Classification Asset Inventories (Hardware/Software) Asset Tracking View more BC/DR Alternate Processing/Storage Site Business Continuity Management System (BCMS) Business Continuity Plan (BCP) View more Training Employee Privacy Training Phishing Training Role-Based Training View more Change Management Change Advisory Board (CAB) Change Management Program Change Restrictions View more Physical & Environment Alarms & Surveillance Alternate Work Sites Delivery & Loading Zones View more Continuous Monitoring Automated Alert Response Automated Compliance Monitoring Data Loss Prevention System (DLP) View more Subprocessors OpenSesame Trust Center Updates Security Advisory – PHP Vulnerabilities (CVE-2026-109618 and CVE-2026-109619) Vulnerabilities Security Advisory – Final Update OpenSesame has completed patching and remediation of CVE-2026-109618 and CVE-2026-109619 across all OpenSesame applications. Our security investigation has identified no evidence of exploitation or unauthorized activity affecting customer data or services. No service interruptions are anticipated. As part of our ongoing security due diligence, we are also confirming the status of relevant third-party service providers and subprocessors. We do not currently anticipate any customer impact from these dependencies. OpenSesame considers its application-level remediation complete and will provide further updates if material new information becomes available. OpenSesame is actively addressing CVE-2026-109618 and CVE-2026-109619. We have deployed web application firewall (WAF) countermeasures to reduce potential exposure and are actively working to patch affected systems. To date, we have identified no evidence of exploitation or compromise. Our investigation and remediation efforts remain ongoing, and we will provide updates as additional information becomes available. Further details are available upon request.