Security & Trust
Last updated: July 23, 2026
Our Commitment
Celerity is purpose-built for education. The platform is designed to support privacy-conscious data handling with scoped access, encrypted transport, secrets management, and operational evidence. Customer policies and agreements complete the compliance boundary.
Data Protection
- Platform endpoints use encrypted transport; storage encryption depends on the selected deployment profile
- Tenant access is scoped through identity and authorization controls
- Passwords are hashed and never stored in plaintext
- Managed deployment secrets are resolved through a dedicated secrets service rather than catalog manifests
- Hosting location and data residency are defined for each deployment
Authentication & Access
- Industry-standard OIDC authentication
- Multi-factor authentication (MFA) supported
- Role-based access controls
- JWT-based API authorization with automatic key rotation
- No shared credentials between tenants
Infrastructure
- Controller and Node components run on managed Linux hosts
- Network access is restricted to the paths required by each deployment
- Backups are scheduled and verified; restore evidence is retained for supported releases
- Release-specific availability and recovery posture is established through lifecycle tests
Operational Security
- Infrastructure access restricted to authorized personnel via secure tunnels
- All administrative actions logged and monitored
- Application-level logging with no PII in logs
- Documented incident response procedures
- Prompt breach notification to affected customers per our Data Processing Agreement
Compliance Roadmap
| Item | Target | Status |
|---|
| FERPA compliance posture | Per customer deployment | π Controls and agreements required |
| Penetration test | Q2 2026 | π Planned |
| SOC 2 Type I | Q3 2026 | π Planned |
| SOC 2 Type II | Q1 2027 | π Planned |
| HECVAT completion | Q2 2026 | π Planned |
Detailed Security Documentation
Detailed security architecture documentation β including infrastructure specifics, network topology, and implementation details β is available to customers and prospects under NDA through the Celerity portal.
To request access, contact us at security@celerityedu.com or start a pilot.
Β© Copyright 2026 Celerity Education Data Systems Inc.