Security

Security Statement

Method Learning and our online learning platform Methodize, utilize Amazon Web Services (AWS) to power our online infrastructure. AWS is the most flexible and secure cloud computing environment available today. AWS’s core infrastructure is built to satisfy the security requirements for the military, global banks, and other high-sensitivity organizations. Method Learning utilizes AWS’s North American regions exclusively.

Why we use AWS

  • Security - AWS includes a deep set of cloud security tools, with 230 security, compliance, and governance services and features. AWS supports 90 security standards and compliance certifications, and all 117 AWS services that store customer data offer the ability to encrypt that data.
  • Maturity - For over 14 years, AWS has been delivering cloud services to millions of customers around the world running a wide variety of use cases. AWS has the most operational experience, at greater scale, of any cloud provider.
  • Innovation and Flexibility - AWS allows us to leverage the latest technologies to experiment and innovate more quickly. Functionality - AWS has significantly more services, and more features within those services, than any other cloud provider.
  • Functionality - AWS has significantly more services, and more features within those services, than any other cloud provider

SSL/TLS

Method Learning is secured by a SHA256 with RSA signature algorithm. SSL certificates are small data files that cryptographically establish an encrypted link between a web server and a browser. This link ensures that all data passed between the web server and browser remain private.

Network Isolation - VPC

A virtual private cloud (VPC) is a virtual network that is isolated in the AWS Cloud. This virtual network closely resembles a traditional internal network, with the benefits of using the scalable infrastructure of AWS.

All Method Learning servers are private instances located in our VPC. That means they are not directly connected to the internet and do not contain public IP addresses. All connections go through our load balancer that is secured by using the latest TLS 1.2 protocol. All instances are further protected by a subnet ( firewall ).

Database Storage and Sessions

Method Learning uses the Amazon Aurora database. Amazon Aurora is a MySQL and PostgreSQL-compatible relational database built for the cloud. Amazon Aurora provides multiple levels of security including VPC network isolation, encryption at rest and encryption of data in transit using SSL. Data in the underlying storage is encrypted, as are the automated backups, snapshots, and replicas in the same cluster.

We also utilize AWS ElastiCache/Redis, which is a fully managed in-memory data structure store for our sessions and cache. All sessions and cache are encrypted at rest and in transit.