Snapshot 249443
Raw (normalized text)
Scripts and page chrome removed; this is what change detection compares.
Skip to navigationSkip to main content D2L Trust Center D2L is committed to protecting the data our customers entrust to us. Our security and privacy programs are independently validated through ISO 27001, 27017, 27018, and 27701 certifications and an annual SOC 2 Type II examination. Use this Trust Center to review our certifications, request audit reports and security documentation. You can find additional information at: https://www.D2L.com/security/Opens in new tab. GRC@d2l.com Privacy PolicyOpens in new tab Filter by Compliance SOC 2 Type II ISO 27001:2022 ISO 27701:2019 ISO 27017:2015 ISO 27018:2019 UK Cyber Essentials 3.3 Trusted Cloud Provider (CSA) EU AI Act European Accessibility Act EU-U.S. Data Privacy Framework GDPR CCPA Resources View all Compliance Reports D2L SOC 2 Type II - 2026 ISO 27001.2022 - SOA View 4 more Questionnaires HECVAT - Brightspace HECVAT - Course Merchant D2L- CAIQv4.0.2 STAR Security QuestionnaireOpens in new tab HECVAT - H5P and Creator 2025 Architecture Diagrams Brightspace Architecture Course Merchant - Architecture Diagrams PCI PCI-DSS-v4-0-1-ROC-AOC - Course Merchant PCI Responsibility Matrix D2L Course Merchant Feb 2026 PCI-DSS-v4-0-1-AOC - H5P Insurance D2L Ltd. - 2026 - COI Brazil Solucoes de Tecnologia - 2026 -COI D2L Asia Ptd. Ltd. - 2026 -COI D2L Australia Pty Ltd - 2026 - COI View 2 more Accessibility Conformance View 1 more Other resources 2026 Penetration Test - Brightspace 2026 Penetration Test - Course Merchant 2026 Penetration Test - H5P 2026 Network Penetration Test Summary - Azure View 5 more Controls View all Infrastructure security Encryption key access restricted Production data segmented Production multi-availability zones established View 3 more Infrastructure security controls Organizational security Asset disposal procedures utilized Confidentiality Agreement acknowledged by employees Employee background checks performed View 3 more Organizational security controls Product security Data encryption utilized Penetration testing performed Vulnerability and system monitoring procedures established View 1 more Product security control Internal security procedures Access requests required Access reviews conducted Company commitments externally communicated View 11 more Internal security procedures controls Data and privacy Customer data deleted upon leaving Data classification policy established Data retention procedures established View 2 more Data and privacy controls Accessibility Standards and Regulatory Alignment Accessibility Conformance Reports (ACRs) Procurement and Vendor Assessment Resources View 1 more Accessibility control Data collected Customer personally identifiable information Credit card information Personal health information Subprocessors View all AWS • Cloud Hosting US, CAN, AUS, EU, SGP or IND Used by D2L to host customer data within the services. For Data storage: Customer Location Dependent For Data processing: Customer Location Dependent. For certain AI inference services, global AWS infrastructure Microsoft 365 • Internal Operations CAN Used by D2L for corporate productivity & internal business operations. Vanta • Internal Operations US Used by D2L to manage trust and compliance related information. Salesforce • Internal Operations & Support CAN Used by D2L for Client Relationship Management (CRM), and providing global support. FAQ View all Updates View all General Subscribe to Updates From D2L's Trust Center Published October 19, 2026 You can now subscribe to updates from D2L's Trust Center to be notified of any updates to our compliance and security program. We'll be communicating key information regarding new security documentation and overall development on our security roadmap.