Technology & Security
How it is built and how it protects.
Public: a general overview of operation in the EU, data protection and the handling of AI. The in-depth details — architecture, data flows, individual protective measures — are visible only to signed-in administration and operators.
Detalles técnicos solo tras iniciar sesión
La arquitectura, los flujos de datos y las medidas de protección en detalle están pensados para los auditores de la institución y no son públicos. La administración y el operador con sesión iniciada los ven aquí completos.
Iniciar sesión como administraciónPara
14 de 14 entradas
- Technology & SecuritydetalladoHow the platform is builtA web application that runs in the browser, with a relational database in Frankfurt and data centres in the EU — multi-tenant, multilingual, secured by thousands of automated tests.EstudiantesDocentesAdministraciónOperador
- Technology & SecuritydetalladoOperation and data in the EUDatabase, files and server functions are in Frankfurt — as a hard rule in the code that an automated test checks on every change. Individual services such as speech output work in the USA; they are named.EstudiantesDocentesAdministraciónOperador
- Technology & SecuritydetalladoAI on the platform — what it may and may not doAI writes suggestions, presents courses and answers questions — labelled, bound to sources and with fixed limits: it does not assess exam behaviour and decides nothing that a person must decide.EstudiantesDocentesAdministraciónOperador
- Technology & SecuritydetalladoArchitecture and hostingThe building blocks of the installation, their locations and how a request runs through them.AdministraciónOperador
- Technology & SecuritydetalladoDatabase and tenant separationEvery table carries the organisation; the database itself decides who sees which row.AdministraciónOperador
- Technology & SecuritydetalladoAI models and speech servicesWhich kind of service is used for what, where it works and what it gets to see — described by function, not by provider.AdministraciónOperador
- Technology & SecuritydetalladoSign-in, second factor and encryptionHow accounts, sessions and secrets are protected.AdministraciónOperador
- Technology & SecuritydetalladoProtection against injected code and abuseContent security policy with a nonce per request, origin check, limits per network address and bot defence.Operador
- Technology & SecuritydetalladoAI guardrailsImmutable rules before every model call, a deterministic check of every input and a check of every output — with a log.AdministraciónOperador
- Technology & SecuritydetalladoCost recording and usage limitsEvery call to an external service goes through one single recording point; limits apply in stages.Operador
- Technology & SecuritydetalladoBackground runsScheduled runs for reminders, cost warnings, reports, fact checks, deletion calendar, learning data and pre-production.Operador
- Technology & SecuritydetalladoTests and guardsAround 3,400 automated tests, including 142 guards that permanently prevent mistakes once made — each with a counter-check.Operador
- Technology & SecuritydetalladoData flowsWhat flows where when a question is asked in a course, when a course is built and when an exam is taken.AdministraciónOperador
- Technology & SecuritydetalladoLoad test for many concurrent usersA tool that measures how many concurrent users the installation can handle — with a request cap, abort under overload and a report as a file. Measured up to 150 reading users; the large stages run as a project service against a preview environment.Operador