Instructure Trust Center
Platform Security
Instructure’s platform (and associated data) is hosted in the cloud by Instructure and delivered over the internet through Amazon Web Services (AWS).
Heading Title
Cloud Security Top of Mind
The Instructure Learning Platform is hosted on Amazon Web Services (AWS) with cloud security top of mind. This includes conforming with AWS’ well-architected framework, implementation of control plane hardening standards and benchmarks, and continuous workload monitoring.
Instructure’s products are designed to make full use of AWS’ security tools and services including AWS WAF, Shield, GuardDuty, Security Groups, KMS, and more. Cloud infrastructure configuration is stored securely with a ‘Infrastructure as code’ approach, controlled by Instructure’s Security Team administrators.
Amazon Web Services (AWS) holds a variety of formal accreditations including ISO 27001, FedRAMP, and SOC 1/2/3, among others.
Protected by a Comprehensive Access Control Framework
The Instructure Learning Platform is protected by a comprehensive access control framework. Access to the platform is secured by authentication, authorization, and MFA (where applied). Access to the cloud infrastructure is protected by a comprehensive access control framework with multiple layers, including VPN, MFA, SSH, and digital keys managed through Amazon's Key Management Service (KMS). KMS is certified via the Cryptographic Module Validation program. Access to our internal systems is protected at every layer, utilizing Okta for MFA, password complexity, least privilege access, and regular user access reviews.
Protecting our customers’ data is non-negotiable.
All data is encrypted in transit. Inbound and outbound traffic is encrypted using TLS 1.2 or higher.
All data is stored at rest within encrypted volumes.
Get the Support You Need