Compliance

The Standards Your Review Board Asks About

Annoto is built for institutional procurement — interoperability, privacy, and accessibility documented and ready for your security and legal review.

Request DocumentationSecurity & Trust →

Standards & Regulations

LTI 1.3 Advantage

Modern 1EdTech interoperability — secure launch, deep linking, roster services, and gradebook pass-back.

FERPA

Student education records handled as protected data. Annoto acts as a school official under your direction.

GDPR

EU data subject rights supported end to end — DPA available, with EU data residency options.

WCAG 2.1 AA

Keyboard-navigable, screen-reader-tested interface. VPAT / accessibility conformance report on request.

SCORM / xAPI

Engagement and completion events emit to your LRS and reporting pipeline in standard formats.

SSO / SAML & OIDC

Learners and instructors sign in through your identity provider — no separate Annoto passwords.

ISO 27001 Certified

Annoto holds ISO/IEC 27001 certification for its information security management system.

HECVAT Available

A completed Higher Education Community Vendor Assessment Toolkit (HECVAT) is available for review.

Illustration representing Annoto's security certifications and compliance assessments
Data Handling

Your Learners’ Data, Treated Like It Matters

Clear answers to the questions your DPO will ask — before they ask them.

✓Encrypted Everywhere — TLS in transit, encryption at rest.
✓Data Residency Options — EU or US hosting, chosen per institution.
✓No Ads, No Resale — learner data is never sold or used for advertising.
✓Retention You Control — deletion and export on institutional request.
FAQ

Frequently Asked Questions

Which standards and regulations does Annoto support?
LTI 1.3, FERPA, GDPR (with DPA), WCAG 2.1 AA accessibility, and SCORM/xAPI compatibility.
How does Annoto support RSI (Regular & Substantive Interaction)?
Annoto adds instructor-initiated, time-stamped, substantive interaction inside course video and documents it with analytics — supporting RSI requirements for online courses.
Can we get a DPA and accessibility documentation?
Yes — a Data Processing Agreement and WCAG/VPAT accessibility documentation are available on request for your review.
Where is learner data stored?
Annoto adds an engagement layer over your existing video and supports regional data residency; request the DPA for specifics on storage and retention.
Procurement

Ready For Your Security Review

Request our compliance pack — DPA, VPAT, and security documentation — or put your IT team in the room with ours.

Book A DemoRequest Documentation