Security at IntelliBoard¶

At IntelliBoard, safeguarding your data is our fundamental duty. We don’t just meet security standards - we engineer them into every layer of our platform. From encryption to zero-trust access, our security model is built to protect your institution’s most sensitive learning analytics.

Our systems are aligned with ISO 27001, NIST 800-53, and FedRAMP Moderate controls. We are SOC 2 Type I compliant, with Type II attestation in progress, and our controls are under active review by independent auditors.

We are building and operating to the full requirements - because trust starts with accountability.

Our Security Framework¶

We protect your data through a layered, zero-trust architecture. Every component - from data ingestion to user access - is authenticated, encrypted, and continuously monitored.

How We Protect Your Data¶

Encryption & Data Protection¶

We ensure your data remains private at every stage of its lifecycle.

• In Transit: All data transfers use TLS 1.3 with perfect forward secrecy.
• At Rest: Data is encrypted with AES-256 using keys managed in AWS KMS with strict rotation policies.
• Key Security: Access to cryptographic keys is limited to authorized personnel and audited quarterly.
• Data Classification: Sensitive data (e.g., student grades) is identified and receives enhanced protection per our Information Security Policy 🔒.
• Regulatory Alignment: Our practices meet global standards, as outlined in our Privacy Policy.

Access Controls & Identity Management¶

We enforce strict access policies to prevent unauthorized use.

• Role-Based Access Control (RBAC): Users (admins, instructors, advisors) access only the data they need.
• Row-Level Security (RLS): An advisor sees only their students. A dean sees only their school.
• Multi-Factor Authentication (MFA): Required for all administrative accounts.
• Session Security: Inactive sessions time out after 15 minutes.
• Identity Verification: All access requests are logged and audited.

Monitoring, Detection & Incident Response¶

We maintain 24/7 vigilance over our systems.

• Real-Time Surveillance: Our SIEM system detects anomalies (e.g., failed logins, unusual data access) in real time.
• Threat Detection SLA: Suspicious activity is identified and triaged within 15 minutes.
• Incident Response: A dedicated team follows a documented process to contain, investigate, and resolve threats.
• Client Notification: If an incident impacts your data, we notify you within 72 hours via secure channels.
• Audit Logs: All system and user activity is logged immutably for forensic review.

Security at a Glance¶

Your Role in Security¶

Security is a shared responsibility. While we protect the platform, your team can strengthen security by:

• Using strong, unique API credentials
• Enabling SSO and MFA for your LMS
• Reporting suspicious activity to privacy@intelliboard.net

For secure integration guides, visit our Knowledge Base.