Security & Compliance

Enterprise-Grade Security, Built For Learning

Annoto meets the privacy, accessibility, and compliance requirements institutions and enterprises demand.

Talk To Security
A secure layer over your existing video
Data Privacy

How We Keep Learner Data Safe

SSO & MFA Access

Single sign-on with MFA and role-based access.

Data Privacy By Design

Least data collected; privacy built into every feature.

Regional Data Residency

Choose where your data is stored and processed.

Encryption Everywhere

Encrypted in transit and at rest, end to end.

Compliance documentation
Procurement-Ready

Compliance Your Procurement Team Will Approve

Everything reviewers ask for — ready to go.

✓FERPA & Student Data Privacy — purpose-built for FERPA and student data privacy.
✓GDPR & DPA Available On Request — GDPR-ready, with a Data Processing Agreement on request.
Request Documentation

Everything Your IT And Legal Teams Need

One secure layer over your existing video, wherever it lives.

Talk To Security →

LTI 1.3 Secure Integration

Secure, standards-based LTI 1.3 install.

Cloud Infrastructure Security

Hardened cloud infrastructure and monitoring.

Incident Response

A clear incident response and disclosure process.

Access Controls & Roles

Granular roles and organization-level controls.

WCAG 2.1 AA Accessibility

Accessible to WCAG 2.1 AA, verified by VPAT.

VPAT Available

VPAT documentation available for review.

FAQ

Security & Trust — Frequently Asked Questions

Is Annoto FERPA and GDPR compliant?
Yes — Annoto is built for education, with FERPA alignment, GDPR & DPA support, and regional data-residency options.
What authentication and access controls are supported?
SSO and MFA, with role-based access. Access flows through your LMS via LTI 1.3.
Is Annoto accessible (WCAG)?
Yes — Annoto conforms to WCAG 2.1 AA, with keyboard navigation and screen-reader support. A VPAT is available on request.
Where is our data stored, and what does Annoto keep?
Annoto adds an engagement layer over your existing video and supports regional data residency. For specifics on what's stored and retention, request our Data Processing Agreement.
Illustration representing Annoto's security certifications and compliance assessments
Certifications & Assessments

Independently Certified, Ready For Review

Annoto's security and compliance posture is documented and available for your review.

✓ISO/IEC 27001 Certified — Annoto holds ISO/IEC 27001 certification for its information security management system.
✓HECVAT Available — A completed Higher Education Community Vendor Assessment Toolkit (HECVAT) is available for review.
✓FERPA & Student Data Privacy — purpose-built for FERPA and student data privacy.
✓GDPR & DPA Available On Request — GDPR-ready, with a Data Processing Agreement on request.
✓WCAG 2.1 AA Accessible — Accessible to WCAG 2.1 AA, verified by VPAT.
✓LTI 1.3 Secure Integration — Secure, standards-based LTI 1.3 install.

A Secure Layer Over Your Existing Video

Annoto — secure, compliant, in-video engagement.

Talk To Security