Security & Compliance
At H5P, we take the security, privacy, and protection of customer data seriously. Our platform is independently assessed against internationally recognized security standards, giving you confidence that your data is managed using industry best practices.
TX-RAMP
The Texas Risk and Authorization Management Program, or TX-RAMP, provides a standardised approach to the security assessment, authorisation and continuous monitoring of cloud services used by Texas state agencies, including public higher education institutions.
H5P.com and TX-RAMP
H5P.com is committed to maintaining security practices that support the requirements of Texas state agencies and public higher education institutions.
TX-RAMP authorisation requires cloud services to conform to a defined set of cybersecurity controls based on the NIST 800-53 framework. These controls help organisations evaluate how cloud service providers protect the confidentiality, integrity and availability of customer data.
At H5P, we take our responsibility to protect customer data seriously. Our security practices include:
Regularly evaluating information security risks, threats and vulnerabilities
Implementing security controls and risk-management processes
Continuously reviewing and improving our information security programme
Protecting the confidentiality, integrity and availability of customer data
SOC 2® Type II
H5P maintains a SOC 2® Type II attestation report, independently assessed by a qualified third-party auditor.
The report evaluates controls related to the security, availability, confidentiality and processing integrity of H5P’s services.
The latest SOC 2® report is available upon request. Please contact us for further information.
PCI DSS
H5P.com uses Stripe, a PCI DSS-compliant payment service provider, to securely process payments for self-serve subscriptions.
Payment card details are entered and processed through Stripe’s secure payment infrastructure and are not stored directly by H5P.com.
