Crucial Learning

Crucial Learning hasn't listed a bug bounty or vulnerability disclosure program on SOC2C. Many companies accept security reports at security@cruciallearning.com or via a /security page (Crucial Learning lists a security contact).

Crucial Learning lists 7 subprocessors on its trust center, including AWS (Amazon Web Services), Auth0, Salesforce, NetSuite, Marketo. Buyers use this for fourth-party risk review.

Crucial Learning hosts on AWS, and handles Customer personally identifiable information, The collection of PII (Personally Identifiable Information) is limited to a Data Subject's name and email address., You may be visiting our website for a variety of reasons. For the purpose of this Privacy Policy, we will classify these reasons as (i) browsing, (ii) submitting forms, (iii) purchasing products and services and (iv) completing surveys. (Please note that not all activities may be available on our website at a given time.) For each different type of activity, we collect and store different types of data for different reasons. • Browsing: If you are simply browsing or navigating through our website, we collect information about your computer and the pages you visit on our website in the aggregate (not individual or personal information). This data is often referred to as clickstream or navigation data. We use this information for research, analysis and reporting so that we can improve our navigation, page structure and page content to help visitors find information more quickly and provide more value when they find what they are looking for on our website. • Submitting Forms: Certain pages of our website contain forms that allow you to request information about our services and solutions or to gain access to valuable resources (like white papers and research documents) in exchange for contact information. In completing one of these forms, you may be required to provide contact information, such as your name, phone number and/or email address. By filling out a form on this website, you are agreeing to our privacy policy. You are also acknowledging that your data may not be subject to EU regulations, like the GDPR, as this is a U.S. based company and website. • Purchasing: For purchasing in our online store or registering for events or courses, we will require you to create an account with us. We collect information in this account that enables us to complete your order and/or registration and streamline your purchasing process the next time you order from us. Furthermore, we will give you the ability to view and update this information if you so choose. • Completing Surveys: For surveys, we collect responses to help us improve various aspects of our business based on aggregate and individual feedback provided. These surveys are sent via opt-in marketing programs or are made available on our website for you to participate if you so choose.. Data residency details are on its trust center.

Crucial Learning's trust center is at https://trust.cruciallearning.com. Its verified SOC 2 status, frameworks, and documents are summarized on its SOC2C profile.

The onboarding of Crucial Learning users is by invitation.

A Crucial Learning account requires users to provide first name, last name, and email address.

Users of the Crucial Learning services establish an account by invitation and provide their data to us via secure browser interactions.

Data is encrypted in transit and at rest using industry-standard ciphers and methods (e.g. AES-256 and TLS).

Asset disposal and repurposing follow the process and procedure contained in our Information Security Management Systems. After receiving a customer’s written request for data erasure, Crucial Learning shall remove the customer’s data within thirty (30) days of receipt of the request. The Customer must provide verification proving ownership of the account by providing the full name and email address used to create the account along with the date and event/course they attended.

Customer data currently resides in the United States, with plans underway for future expansion to additional geographies.

Customer data is logically segregated using Application Code, Role Based Access Control, and other technologies.

Yes, Crucial Learning integrates with Microsoft Entra, Active Directory, and Okta.

No, requests for any role changes must be made by enlisting the help of Crucial Learning technical customer support.

Customers can submit an account termination request by submitting a ticket to the Crucial Learning Help Desk (https://help.cruciallearning.com/). Customers can submit a request to privacy@cruciallearning.com to have their personal information removed from marketing lists that they registered. The email should include the specific lists they are requesting their information to be removed.

Crucial Learning uses the principle of least privilege to limit access on a need-to-know basis.

Yes, Crucial Learning performs periodic reviews of access to managed resources to ensure that employee access is appropriate.