Security & Trust

Last updated: July 23, 2026

Our Commitment

Celerity is purpose-built for education. The platform is designed to support privacy-conscious data handling with scoped access, encrypted transport, secrets management, and operational evidence. Customer policies and agreements complete the compliance boundary.

Data Protection

  • Platform endpoints use encrypted transport; storage encryption depends on the selected deployment profile
  • Tenant access is scoped through identity and authorization controls
  • Passwords are hashed and never stored in plaintext
  • Managed deployment secrets are resolved through a dedicated secrets service rather than catalog manifests
  • Hosting location and data residency are defined for each deployment

Authentication & Access

  • Industry-standard OIDC authentication
  • Multi-factor authentication (MFA) supported
  • Role-based access controls
  • JWT-based API authorization with automatic key rotation
  • No shared credentials between tenants

Infrastructure

  • Controller and Node components run on managed Linux hosts
  • Network access is restricted to the paths required by each deployment
  • Backups are scheduled and verified; restore evidence is retained for supported releases
  • Release-specific availability and recovery posture is established through lifecycle tests

Operational Security

  • Infrastructure access restricted to authorized personnel via secure tunnels
  • All administrative actions logged and monitored
  • Application-level logging with no PII in logs
  • Documented incident response procedures
  • Prompt breach notification to affected customers per our Data Processing Agreement

Compliance Roadmap

ItemTargetStatus
FERPA compliance posturePer customer deploymentπŸ“‹ Controls and agreements required
Penetration testQ2 2026πŸ“‹ Planned
SOC 2 Type IQ3 2026πŸ“‹ Planned
SOC 2 Type IIQ1 2027πŸ“‹ Planned
HECVAT completionQ2 2026πŸ“‹ Planned

Detailed Security Documentation

Detailed security architecture documentation β€” including infrastructure specifics, network topology, and implementation details β€” is available to customers and prospects under NDA through the Celerity portal.

To request access, contact us at security@celerityedu.com or start a pilot.

Contact

Security inquiries: security@celerityedu.com

Vulnerability reports: See our Responsible Disclosure Policy

Support portal: support.celerityedu.com