Review Trainery Security for Your Environment
Review identity, access, encryption, audit logging, hosting, data governance, and AI-related security requirements with the Trainery team for the modules and deployment in scope.
Enterprise LMS Security & Data Protection
Trainery is built on a security-first architecture with role-based access, SSO, encryption, and data governance designed for enterprise and regulated-industry training environments.
Security Controls Across the Platform
Trainery provides controls for access management, encryption, audit logging, and data governance. Validate hosting, configuration, documentation, and contractual security requirements during vendor review.
Identity & Access
Trainery provides role-based access controls and SAML 2.0 single sign-on options. Confirm role granularity, identity-provider compatibility, provisioning, MFA, and session controls during security review.
.svg)
RBAC across all modules and data
MFA requirements confirmed during security review
SSO via SAML 2.0 / Okta / Azure AD
Session management & timeout controls
.svg)
Data Protection
Trainery provides encryption, backup, and data-retention controls. Confirm encryption configuration, backup architecture, hosting geography, retention settings, and contractual requirements during security review.
Encryption-at-rest configuration reviewed during security assessment
Encryption-in-transit requirements reviewed during security assessment
Backup architecture and recovery requirements reviewed during security assessment
Configurable data retention
.svg)
Compliance & Audit
Trainery provides audit logging and exportable reporting capabilities. Confirm captured event types, retention, immutability requirements, export formats, and plan availability during security review.
Audit logging for configured events
Admin activity tracking
Exportable compliance reports
Documented security controls
Infrastructure & Isolation
Trainery uses a multi-tenant architecture with controls designed to isolate customer data. Hosting, tenancy, backup, and dedicated-infrastructure requirements should be validated against your organization’s security standards.
Tenant data-isolation controls
Infrastructure requirements reviewed during scoping
Availability commitments confirmed contractually
Security testing evidence reviewed during vendor assessment
Frequently Asked Questions
What security controls does Trainery use?
Trainery uses controls for access management, encryption, system availability, incident response, and audit logging. Enterprise clients in regulated industries, including insurance, financial services, and healthcare, can request available security documentation during vendor assessment.
Does Trainery support Single Sign-On, and which identity providers are compatible?
Trainery supports SSO via SAML 2.0. During implementation, confirm the identity provider, provisioning and offboarding workflow, session controls, and MFA requirements for your environment.
How are user permissions managed across different roles and modules?
Trainery supports role-based access controls across its modules. Confirm available role definitions, custom permissions, data scope, and least-privilege requirements during implementation.
How is learner data encrypted and where is it stored?
Trainery supports encryption and data-protection controls for learner information. Organizations should validate encryption configuration, hosting location, backup architecture, tenancy model, and data-residency requirements during security review.
Can we get a full audit log of all admin actions and data access events?
Trainery provides audit logging and reporting capabilities. Confirm which events are captured, retention periods, export formats, and plan availability against your compliance and internal-audit requirements.
Is Trainery suitable for regulated industries like insurance, healthcare, or financial services?
Trainery can support training workflows in regulated industries, but suitability depends on the organization, applicable regulations, security requirements, and evidence needed. Review the available controls and documentation during vendor assessment.
What happens to our data if we end our Trainery subscription?
Data export, retention, deletion, and transition requirements should be documented in the customer agreement. Confirm required records, formats, retention windows, and handover procedures before contract execution.
.svg){kind=icon}
.svg)
.svg)
.svg)
Part of the TraineryHCM™ Platform: