Technology & Security
How it is built and how it protects.
Public: a general overview of operation in the EU, data protection and the handling of AI. The in-depth details — architecture, data flows, individual protective measures — are visible only to signed-in administration and operators.
פרטים טכניים רק לאחר התחברות
ארכיטקטורה, זרימות מידע ואמצעי הגנה בפירוט מיועדים למבקרי המוסד ואינם ציבוריים. מנהלה ומפעיל מחוברים רואים אותם כאן במלואם.
התחברות כמנהלהעבור
14 מתוך 14 ערכים
- Technology & SecurityמפורטHow the platform is builtA web application that runs in the browser, with a relational database in Frankfurt and data centres in the EU — multi-tenant, multilingual, secured by thousands of automated tests.סטודנטיםסגל הוראהמנהלהמפעיל
- Technology & SecurityמפורטOperation and data in the EUDatabase, files and server functions are in Frankfurt — as a hard rule in the code that an automated test checks on every change. Individual services such as speech output work in the USA; they are named.סטודנטיםסגל הוראהמנהלהמפעיל
- Technology & SecurityמפורטAI on the platform — what it may and may not doAI writes suggestions, presents courses and answers questions — labelled, bound to sources and with fixed limits: it does not assess exam behaviour and decides nothing that a person must decide.סטודנטיםסגל הוראהמנהלהמפעיל
- Technology & SecurityמפורטArchitecture and hostingThe building blocks of the installation, their locations and how a request runs through them.מנהלהמפעיל
- Technology & SecurityמפורטDatabase and tenant separationEvery table carries the organisation; the database itself decides who sees which row.מנהלהמפעיל
- Technology & SecurityמפורטAI models and speech servicesWhich kind of service is used for what, where it works and what it gets to see — described by function, not by provider.מנהלהמפעיל
- Technology & SecurityמפורטSign-in, second factor and encryptionHow accounts, sessions and secrets are protected.מנהלהמפעיל
- Technology & SecurityמפורטProtection against injected code and abuseContent security policy with a nonce per request, origin check, limits per network address and bot defence.מפעיל
- Technology & SecurityמפורטAI guardrailsImmutable rules before every model call, a deterministic check of every input and a check of every output — with a log.מנהלהמפעיל
- Technology & SecurityמפורטCost recording and usage limitsEvery call to an external service goes through one single recording point; limits apply in stages.מפעיל
- Technology & SecurityמפורטBackground runsScheduled runs for reminders, cost warnings, reports, fact checks, deletion calendar, learning data and pre-production.מפעיל
- Technology & SecurityמפורטTests and guardsAround 3,400 automated tests, including 142 guards that permanently prevent mistakes once made — each with a counter-check.מפעיל
- Technology & SecurityמפורטData flowsWhat flows where when a question is asked in a course, when a course is built and when an exam is taken.מנהלהמפעיל
- Technology & SecurityמפורטLoad test for many concurrent usersA tool that measures how many concurrent users the installation can handle — with a request cap, abort under overload and a report as a file. Measured up to 150 reading users; the large stages run as a project service against a preview environment.מפעיל