Trust & Security

Enterprise-Grade Security for Education

We take security seriously. From SOC 2 compliance to blockchain-verified credentials, Kinfora is built to meet the strictest institutional requirements.

SOC 2 Type II
FERPA Aligned
AES-256 Encryption
SSO Ready

Compliance & Certifications

Meeting the standards your institution requires

πŸ›‘οΈ

SOC 2 Type II

Ready

Our security controls are audited annually against AICPA Trust Services Criteria. We maintain strict controls over data security, availability, and confidentiality.

πŸŽ“

FERPA Aligned

Compliant

We follow Family Educational Rights and Privacy Act guidelines to protect student education records. Your student data stays private and secure.

πŸ‘Ά

COPPA Aware

Compliant

For users under 13, we follow Children's Online Privacy Protection Act requirements. Parental consent workflows available for K-8 implementations.

🌍

GDPR Ready

Compliant

For our European users, we comply with General Data Protection Regulation requirements including data portability and right to erasure.

Security Infrastructure

How we protect your data at every layer

πŸ”

Encryption at Rest

All data is encrypted using AES-256 encryption. Your information is protected even if physical storage is compromised.

πŸ”’

Encryption in Transit

TLS 1.3 encryption for all data transmission. Industry-leading protection for data moving between your browser and our servers.

🏒

SOC 2 Data Centers

Hosted on Google Cloud Platform with SOC 2 certified data centers. Physical security, redundancy, and 99.9% uptime SLA.

πŸ”

Regular Audits

Annual penetration testing and security audits by independent third parties. Continuous vulnerability scanning and remediation.

πŸ“Š

Access Logging

Comprehensive audit logs track all system access. Full visibility into who accessed what and when.

🚨

Incident Response

24/7 security monitoring with documented incident response procedures. Breach notification within 72 hours as required.

Secure Integrations

Connect Kinfora to your existing systems securely

πŸ”‘

Single Sign-On (SSO)

SAML 2.0OAuth 2.0OpenID Connect

Integrate with your existing identity provider. Support for Okta, Azure AD, Google Workspace, and more.

πŸ“š

LMS Integration

LTI 1.3LTI Advantage

Deep integration with Canvas, Blackboard, Moodle, and other LTI-compliant learning management systems.

πŸ‘₯

HRIS Sync

SCIM 2.0REST API

Automatic user provisioning and deprovisioning. Sync with Workday, BambooHR, and other HR systems.

πŸ“ˆ

Reporting API

REST APIWebhooks

Export progress data, completion rates, and certification status to your analytics systems.

Data Privacy

Transparency about what we collect and how we use it

What We Collect

  • βœ“Account information (name, email, institution)
  • βœ“Learning progress and assessment scores
  • βœ“Trading simulation activity (virtual only)
  • βœ“Usage analytics for platform improvement

What We Never Collect

  • βœ—Real financial account information
  • βœ—Social security numbers
  • βœ—Payment information stored on our servers
  • βœ—Biometric data

Your Rights

  • βœ“Access your data anytime via account settings
  • βœ“Export your data in standard formats
  • βœ“Request deletion of your account and data
  • βœ“Opt out of non-essential data collection
πŸ”—

Blockchain-Verified Credentials

All Kinfora certifications are minted as NFTs on the Polygon blockchain. This provides tamper-proof verification that anyone can check instantlyβ€” no phone calls, no PDF forgeries, no trust issues.

ImmutableOnce issued, credentials cannot be altered or forged
VerifiableEmployers can verify authenticity with one click
PortableStudents own their credentials forever
Verify a Credential

Educational Disclaimer

Kinfora is an educational platform. We provide trading simulation and financial educationβ€”not investment advice. Key points:

  • All trading on Kinfora uses virtual money onlyβ€”no real financial risk
  • Simulation results do not guarantee real-world trading success
  • Kinfora certifications demonstrate educational achievement, not professional licensing
  • Our credentials are not equivalent to FINRA licenses or CFA designation
  • Always consult with a qualified financial advisor before making investment decisions

Questions About Security?

Our team is ready to discuss your institution's specific security and compliance requirements.

security@kinfora.com