Instructure Trust Center

Platform Security

Instructure’s platform (and associated data) is hosted in the cloud by Instructure and delivered over the internet through Amazon Web Services (AWS).

• Cloud Security
• Access Controls
• Protecting our customers’ data is non-negotiable.

Cloud Security Top of Mind

The Instructure Learning Platform is hosted on Amazon Web Services (AWS) with cloud security top of mind. This includes conforming with AWS’ well-architected framework, implementation of control plane hardening standards and benchmarks, and continuous workload monitoring.

Instructure’s products are designed to make full use of AWS’ security tools and services including AWS WAF, Shield, GuardDuty, Security Groups, KMS, and more. Cloud infrastructure configuration is stored securely with a ‘Infrastructure as code’ approach, controlled by Instructure’s Security Team administrators.

Protected by a Comprehensive Access Control Framework

​​The Instructure Learning Platform is protected by a comprehensive access control framework. Access to the platform is secured by authentication, authorization, and MFA (where applied). Access to the cloud infrastructure is protected by a comprehensive access control framework with multiple layers, including VPN, MFA, SSH, and digital keys managed through Amazon's Key Management Service (KMS). KMS is certified via the Cryptographic Module Validation program. Access to our internal systems is protected at every layer, utilizing Okta for MFA, password complexity, least privilege access, and regular user access reviews.

Data Protection

All data is encrypted in transit. Inbound and outbound traffic is encrypted using TLS 1.2 or higher.

• All data is stored at rest within encrypted volumes.

Support

Get the Support You Need

Contact Security