Privacy and security by design

Built with security at the core

Security doesn’t start with the final test. At Linqur, it’s already built into the platform’s design. We follow a security by design approach: security is woven into every step of development.

We follow recognized guidelines such as OWASP, CWE, and CIS Controls. This ensures our platform is resilient to vulnerabilities and meets the highest standards of information security.

Our platform and underlying infrastructure are designed according to:

• ISO 9001 – quality management
• ISO 27001 – information security
• NEN 7510 – information security in healthcare

What does that mean for you? A learning environment that runs reliably and protects your data.

Read all about the three certifications and how users benefit from them

What we actually do

It sounds nice—a secure environment—but what does that look like in practice? Below are some examples of the steps we take to ensure your data and information are always safe:

• Encrypted connections (SSL)
• Strong passwords and two-factor authentication for administrators
• Security incident logs
• Local data storage in a data center in the Netherlands
• Daily backups and automatic updates
• 24/7 monitoring of availability and performance

Backed by a global community

The Linqur platform's source code is reviewed daily by a large international community of developers and security experts. This open approach ensures both speed and quality: bugs are discovered faster and improvements are widely shared. Major organizations, including institutions with high security requirements, regularly conduct independent security audits and share their findings. That knowledge flows back into the platform, benefiting all users.

Always vigilant through proactive testing

We don’t wait until something goes wrong. Through a global network of ethical hackers and a structured reporting system (responsible disclosure), we constantly monitor potential vulnerabilities. If something is discovered, we fix it—before it can cause harm. Only then do we communicate about it. This protects your environment and that of others.

You control your own data

Data belongs to you. Period. We only collect what’s necessary to keep the platform running smoothly—nothing more. All data stays within the Netherlands and is never shared with third parties without reason.

Users always have insight into their data and can:

• Request or download their data
• Submit requests for correction or deletion
• Review the terms they have agreed to
• Contact our Data Protection Officer

Smart tools for privacy regulations (like the GDPR)

Our platform helps organizations comply with privacy regulations like the GDPR. For example, you can:

• Manage different privacy policies, including for guest users
• Protect minors through age verification and parental consent
• Set retention periods and centrally manage data requests
• Check plugins for privacy compliance
• Limit video sharing (e.g., from YouTube or Vimeo) to only necessary data exchange

Privacy by design

With every new development in the Linqur platform, we consciously consider how we collect, store, and—if needed—delete personal data. Everything is geared toward compliance with current privacy laws, such as the GDPR.

Organizations that use platforms like YouTube or Vimeo to offer learning materials can enable the "do not track" setting. This ensures only the strictly necessary data is shared with these video platforms. That way, you minimize external data traffic while still enjoying interactive content.

Extensions and plugins added to the platform also fall under our privacy policy. To ensure they meet GDPR standards, our developers use a special Privacy API. This allows them to ensure transparency, consent, and data removal are handled correctly.

Want to know more?

Curious how we technically secure your data? Also check out our page on ISO-certified hosting.

Questions about privacy or security? Feel free to email us at support@linqur.nl. We’re happy to help.