Security & privacy
Built to keep training records safe
Training records are personal information. Here's how Acadenix protects them — and what we do and don't do with your data.
Sign-in without passwords
- Acadenix has no passwords. People sign in with a six-digit code sent to their email, which expires after five minutes and three tries.
- Or they use their Google, Microsoft or LinkedIn account — and organisations can use their own sign-in apps with those providers.
- On Gold, SAML single sign-on works with Microsoft Entra ID, Okta and Google Workspace. Accounts are created at first sign-in, limited to your email domains.
- Administrators can be limited to your IP ranges, idle sessions sign out, and a recovery path for administrators can't be switched off.
Your organisation's data
- Each organisation's data is kept separate, and it's encrypted in transit and at rest.
- We don't use your information for direct marketing, and we don't sell it.
- We don't use advertising or cross-site tracking cookies.
- Email history keeps who was sent what and when for 30 days — never the message content.
Protected SCORM content
- SCORM and web packages are delivered from a separate, sandboxed content address using short-lived signed access to private storage.
- That means course files can't be hot-linked or shared outside Acadenix.
Accountability
- Administrative actions are recorded in the activity log, including settings changes, legal text publishing and licence changes.
- When an administrator or our support team acts on someone's behalf, it's recorded — and shown in your own activity log.
- Administrators only ever see their own organisation and those below it.
Nix and AI
- Nix answers from Acadenix's help articles and your plan — it can't see your people, courses or results.
- Questions to Nix are processed by Google Vertex AI, which may be outside your data's usual region.
- Conversations are deleted after 30 days, and organisation administrators can't read them.
Infrastructure
- Cloudflare provides DNS, TLS, the web application firewall and bot protection.
- The application runs on Google Cloud Run, with a Neon Postgres database and private Cloudflare R2 storage.
- Every production release is a verified, signed build, promoted without being rebuilt.
Subprocessors
These providers process personal information on our behalf to run Acadenix.
| Provider | Purpose |
|---|---|
| Google Cloud | Application hosting; Vertex AI for Nix |
| Neon | Database |
| Cloudflare | Network, security and file storage |
| Mailjet | Transactional email |
| Google, Microsoft and LinkedIn | Sign-in, when you choose to use them |
Based in Australia
Acadenix is based in Queensland, Australia, and handles personal information under the Privacy Act 1988 (Cth) and the Australian Privacy Principles. Questions about privacy? Email privacy@acadenix.com.
Security questions before you buy?
Send us your questionnaire or ask us anything about how Acadenix handles your data.