Technology & Security
How it is built and how it protects.
Public: a general overview of operation in the EU, data protection and the handling of AI. The in-depth details — architecture, data flows, individual protective measures — are visible only to signed-in administration and operators.
Détails techniques après connexion
L'architecture, les flux de données et les mesures de protection en détail sont destinés aux auditeurs de l'établissement et ne sont pas publics. L'administration et l'exploitant connectés les voient ici en entier.
Se connecter en tant qu'administrationPour
14 sur 14 entrées
- Technology & SecuritydétailléHow the platform is builtA web application that runs in the browser, with a relational database in Frankfurt and data centres in the EU — multi-tenant, multilingual, secured by thousands of automated tests.ÉtudiantsEnseignantsAdministrationExploitant
- Technology & SecuritydétailléOperation and data in the EUDatabase, files and server functions are in Frankfurt — as a hard rule in the code that an automated test checks on every change. Individual services such as speech output work in the USA; they are named.ÉtudiantsEnseignantsAdministrationExploitant
- Technology & SecuritydétailléAI on the platform — what it may and may not doAI writes suggestions, presents courses and answers questions — labelled, bound to sources and with fixed limits: it does not assess exam behaviour and decides nothing that a person must decide.ÉtudiantsEnseignantsAdministrationExploitant
- Technology & SecuritydétailléArchitecture and hostingThe building blocks of the installation, their locations and how a request runs through them.AdministrationExploitant
- Technology & SecuritydétailléDatabase and tenant separationEvery table carries the organisation; the database itself decides who sees which row.AdministrationExploitant
- Technology & SecuritydétailléAI models and speech servicesWhich kind of service is used for what, where it works and what it gets to see — described by function, not by provider.AdministrationExploitant
- Technology & SecuritydétailléSign-in, second factor and encryptionHow accounts, sessions and secrets are protected.AdministrationExploitant
- Technology & SecuritydétailléProtection against injected code and abuseContent security policy with a nonce per request, origin check, limits per network address and bot defence.Exploitant
- Technology & SecuritydétailléAI guardrailsImmutable rules before every model call, a deterministic check of every input and a check of every output — with a log.AdministrationExploitant
- Technology & SecuritydétailléCost recording and usage limitsEvery call to an external service goes through one single recording point; limits apply in stages.Exploitant
- Technology & SecuritydétailléBackground runsScheduled runs for reminders, cost warnings, reports, fact checks, deletion calendar, learning data and pre-production.Exploitant
- Technology & SecuritydétailléTests and guardsAround 3,400 automated tests, including 142 guards that permanently prevent mistakes once made — each with a counter-check.Exploitant
- Technology & SecuritydétailléData flowsWhat flows where when a question is asked in a course, when a course is built and when an exam is taken.AdministrationExploitant
- Technology & SecuritydétailléLoad test for many concurrent usersA tool that measures how many concurrent users the installation can handle — with a request cap, abort under overload and a report as a file. Measured up to 150 reading users; the large stages run as a project service against a preview environment.Exploitant