Privacy

What we collect and who can see it

This page describes the actual records this application stores.

What we collect

Account information: your work email address and an encrypted password handled by our authentication provider. We never see or store your password ourselves.
Professional profile: full professional name, company name, job role, and optional individual NMLS ID, company NMLS ID, states of work or licensure, and branch or department. NMLS numbers are self-reported and are not verified against any licensing system.
Training records: which learning sections you acknowledged, each quiz attempt with its answers, timestamps, score and course version, your attestation text and typed name, any certificate issued to you, and company policy acknowledgments.
Basic technical logs needed to operate the service.

We do not ask for or accept borrower information, loan files, suspicious activity report narratives or documents, Social Security numbers, dates of birth, identity documents, or NMLS login credentials.

To provide the course, grade the assessment, keep your completion record and produce certificates.
To let authorized administrators of a company workspace you joined see the training status of their own members.

You can always see your own profile, attempts and certificates.
If you create or accept an invitation to a company workspace, the owners and administrators of that workspace can see your name, work email, job role, self-reported NMLS ID, training progress, attempt history, scores and certificates.
Nothing about your training is published publicly. There is no public certificate directory, no public learner list and no leaderboard.

We use a hosting and managed database provider to run the application, store records and handle authentication email. They process this data on our behalf.
This app does not currently have an outbound email provider connected for invitations, so invitation links are copied and shared by the administrator rather than emailed by us.

Signed-in users can update their professional profile at any time. Changing your profile does not change your permissions and does not rewrite the identity recorded on a certificate that was already issued.
Use the support and privacy request form inside your account to ask for a copy or deletion of your records.

We make no promise of accreditation, certification, regulatory approval, legal sufficiency, a specific uptime level or permanently free hosting.
Training data is not used for recruitment and is not sold.