Security and compliance
The page to share with your IT team and your DPO.
Our commitments, with no sales pitch. Anything not written here is not committed.
SkillPlex security sheet (PDF)
The content of this page, formatted to share internally.
Architecture and hosting
For IT
AWS hosting, European Union regionServerless architecture: API Gateway, Lambda, DynamoDB, S3, OpenSearch
Encryption at rest and in transitKMS, TLS 1.2+
Three isolated environments (dev, staging, production)Infrastructure as code, reproducible deployments
Backups and disaster recoveryDocumented recovery objectives
Web application firewall (WAF) and rate limiting
Identity and access
For IT and security
Enterprise authentication (AWS Cognito)Accounts, roles and teams carried by your directory
SSO with SAML / OIDC (Microsoft Entra ID, Okta)
Multi-factor authentication (MFA)
Visibility by team or departmentA video is visible only to the scope chosen at approval
Data and GDPR
For the DPO
Data stored in the European UnionAny transfers are governed by the DPA and the list of sub-processors
Deletion and recycle binSoft delete, then permanent purge when due
Configurable retention periods, data export
Data processing agreement (DPA) and list of sub-processorsAWS as sole hosting sub-processor
Audit log of sensitive actionsApproval, deletion, visibility change, exports
Artificial intelligence
For the DPO and IT
AWS managed services onlyAmazon Transcribe, Translate, Comprehend, Bedrock
Your data trains no modelNeither ours nor our providers’
AI output reviewed by a person before publicationTranscript, summary and chapters approved by the business moderator
MentorIA only uses authorised contentApproved videos the user can see; every answer cites its sources
Sensitive-content check before publicationPersonal data and confidential information flagged to the business moderator; the decision stays human
Synthetic content labelled as suchNo employee’s voice or image reproduced without consent
Image rights
For the DPO and HR
Employee consent collected in the toolAt each publication, with the distribution scope
Consent withdrawal and video suspension“Suspended” status without deleting the team’s work
Template clause for the company agreementProvided at deployment
A question this page doesn’t cover?
Our architect answers your IT or security team directly, by video call or in writing.
Ask a technical question