The LMS your IT team will happily sign off on
Every customer runs in its own isolated database, backups are encrypted and kept in the European Union, and we sign a GDPR data processing agreement with the EU Standard Contractual Clauses. Access is scoped to the person and their team, and you can run the whole thing under your own brand.
Three ways we keep your program safe
Security is not a page in a policy binder. It is how the platform is built, so you can hand it to legal and IT without a long list of caveats.
Your data stays yours
Each customer lives in its own database, not a shared table with everyone else. When you connect email or payments you use your own keys, so your credentials never leave your control. Need to export or remove your data? Just ask, it is yours.
Only the right people get in
Build your own roles and give each one exactly the right permissions (Growth and above). Hand a regional manager a scoped admin view of just their own people, without opening up the whole platform. Access fits your org chart, not the other way around.
Privacy and policies, built in
Publish your privacy policy, terms, and codes of conduct right inside the platform, and have learners accept them before they start. Update a version and your people re-confirm, so your consent trail stays current without a side spreadsheet.
Data protection and hosting
Built for organizations that answer to the GDPR. Where your data lives, how it is protected, and what we commit to in writing. Live service status is always at status.nialtus.com.
Where your data lives
Nialtus runs on servers in India, with all traffic delivered and protected by Cloudflare. For customers in the European Union, the application, databases, files and backups are hosted in the EU, set up before any of your people’s data is loaded.
Encrypted, tested backups
Every workspace is backed up each night and in a full weekly archive. Backups are encrypted before they leave our server and kept in the EU, locked for 30 days so no one can delete or change them. Every month we restore one to prove it works.
A GDPR contract you can sign
You are the controller and we are your processor. We sign a data processing agreement under Article 28 of the GDPR, with the EU Standard Contractual Clauses, a transfer impact assessment and our list of sub-processors.
Told within 48 hours
If an incident affects your data, we tell you without undue delay and within 48 hours, so you can meet your own 72-hour deadline. Your admins can log and track incidents in Nialtus with a 72-hour clock.
Your data, your rules
Export a person’s records or your whole workspace, erase or anonymize people, and set a retention period for dormant accounts. When your contract ends, we delete your workspace within 30 days, after offering you an export.
Straight about certifications
We do not hold ISO 27001 or a SOC 2 report yet, and we will not say we do. We answer your security questionnaire in full and share our security measures in writing.
One customer, one database
Many platforms put every customer’s records in the same shared tables and keep them apart with a filter in the code. Nialtus does not. Your learners, courses and results live in a database of their own, and your uploaded files sit in a folder of their own. It is a cleaner line for your auditors, and it means one customer’s data can never accidentally surface in another’s reports.
Consent you can actually show
Keep your privacy policy, terms, and codes of conduct in one place and have every learner accept them on their way in. When you publish a new version, people re-confirm, so you always have a clean answer to a simple question: did they agree, and to which version?
Runs entirely in your brand
Add white-label and run Nialtus entirely as your own. Your logo, your colors, your domain, and mail from your own address, so your learners see your organization from start to finish and never a trace of ours.
The controls you expect, built in
The switches and safeguards your admins, IT, and security reviewers ask for, ready on day one.
Nialtus is built and run by Learning Everest, a training company that has answered these same security questions for enterprise clients for years. We know what your reviewers will ask, because we have sat on your side of the table.
Questions your security team will ask
Straight answers to the ones we hear most. If yours is not here, ask us on a call and we will walk you through it point by point.
Send it over and we will complete it for your account, then walk your IT and security teams through anything that needs a conversation.
