Compliance at DX.Training

Our Commitment

At DX.Training (operated by Artintech Inc.), we are committed to protecting student and institutional data while respecting applicable regulations. Our practices are designed to align with widely recognized privacy and security standards without overstating certifications we do not directly hold.

Frameworks & Standards

• Our privacy practices are guided by the principles of PIPEDA (Canada) and GDPR (EU).

• We operate with awareness of FERPA considerations in higher education in the United States.

• Our hosting provider, Hosting.com, delivers enterprise-class infrastructure with secure data centers in the United States. Hosting.com follows industry-standard security and data protection practices. Specific certifications or audit reports can be shared by Hosting.com upon request.

• All payment processing is handled exclusively by Stripe, which is a PCI DSS Level 1–certified service provider (the highest standard for payment processors). DX.Training does not store or process cardholder data.

Assessments & Documentation

• We provide a VPAT (WCAG 2.1 A/AA) to document accessibility practices.

• We have completed a HECVAT Lite security questionnaire to support institutional IT reviews.

• A Data Protection Summary is available upon request.

Data Practices

• We collect and store only minimal personally identifiable information (PII): student name, university email, and course activity (progress, quizzes, certificates).

• We do not collect or process financial, health, or government ID data.

• Student records are retained for the duration of the course plus 12 months, with deletion available upon request.