Compliance frameworks, security audits, and quality certifications this company maintains.
D2L maintains SOC 2 Type II certification covering security, availability, and confidentiality, providing partner universities, colleges, and corporate customers with third-party validated assurance that the Brightspace LMS platform protects student learning data and institutional content.
D2L holds ISO 27001 certification for its information security management system, demonstrating to higher education and enterprise customers that Brightspace meets international standards for protecting the sensitive student academic and performance data processed on the platform.
D2L complies with the Family Educational Rights and Privacy Act (FERPA) as a school official service provider for US partner institutions, ensuring that student educational records stored and processed within Brightspace are handled in accordance with federal student privacy law requirements.
D2L complies with Canada Personal Information Protection and Electronic Documents Act (PIPEDA), governing how personal data of Canadian higher education students and corporate learners is collected, processed, and stored within the Brightspace LMS cloud infrastructure.
D2L complies with the EU General Data Protection Regulation (GDPR), ensuring that student and learner personal data from European Brightspace customers is processed in accordance with EU data protection law including data minimization, consent, and subject rights requirements.
Brightspace meets WCAG 2.1 AA accessibility guidelines, ensuring that students and learners with disabilities can fully access course content, assessments, discussion boards, and learning analytics features on the D2L platform across desktop and mobile devices.
D2L is pursuing FedRAMP authorization for Brightspace to enable US federal government agencies and federally funded research universities to deploy the LMS in compliance with federal cloud security requirements under the Federal Risk and Authorization Management Program.
D2L holds ISO 9001:2015 certification for its software development and professional services delivery processes, providing higher education and corporate customers with assurance that Brightspace platform releases and implementation services meet a consistent quality management standard.
Regulatory
IMS Global LTI 1.3
CertifiedD2L Brightspace is IMS Global LTI 1.3 certified, enabling secure integration of third-party learning tools including publisher content, proctoring software, and accessibility tools through the 1EdTech standard for interoperability across the higher education LMS ecosystem.
D2L complies with the California Consumer Privacy Act (CCPA) for California-based students and learners using Brightspace through California higher education institutions and corporate training customers, providing required data access, deletion, and opt-out rights.