Legal
Our third parties
We teach third-party risk management, so we apply it to our own business.
These are the providers that handle your information when you use Third Party Labs, what each one holds, and the security assurance each one publishes. We keep this register current and review it whenever we add or change a provider.
The register
| Provider | What we use it for | What it holds about you | Assurance it publishes |
|---|---|---|---|
| LearnWorlds | Third Party Labs Academy: courses, assessments and certificates | Name, email, sign-in details, country, purchases, course progress, assessment results and certificates | ISO 27001 and SOC 2 certified. Hosted on Google Cloud, encrypted in transit (TLS 1.3) and at rest, a separate database for each school, daily backups. LearnWorlds security |
| Stripe | Card payments at checkout | Payment details and billing country. We never see your full card number, and neither does LearnWorlds. | PCI Service Provider Level 1, the highest level in the payments industry. SOC 1 and SOC 2 Type II audited each year. Card numbers encrypted with AES-256. Stripe security |
| Kit | The Lab Brief and waitlist emails | First name, email, which list you joined, and whether you open our emails | Hosted on Amazon Web Services, which is SOC 2 Type II and ISO 27001 certified. All data encrypted in transit (TLS). Kit security |
| Cloudflare | Hosting and protecting this website, and counting visits without cookies | Technical information such as IP address and browser type | ISO 27001, ISO 27701, PCI DSS and SOC 2 Type II. Cloudflare Trust Hub |
| Google Workspace | Our email (hello@ and help@) | What you send us by email | ISO 27001 certified and independently audited. Google Workspace security |
Certifications are as each provider publishes them on its own site, checked on the date above.
How we manage them
- Register: every provider that handles customer information is listed on this page.
- Assess: before we use a provider, we check the security certifications it publishes, and we share only what it needs to do its job.
- Contract: each provider handles your information under its own published privacy and data processing terms.
- Monitor: we review this register when we add or change a provider, and at least once a year. Our accounts use two-step sign-in, and access is limited to the people who need it.
- Exit: if we change a provider, we update this page and our Privacy Policy first.
Your information
Your Academy details stay in LearnWorlds. We do not copy them to Kit or add you to any list; you join The Lab Brief only if you sign up yourself. These providers store information outside Australia; see Storage outside Australia. For how long we keep information and your rights, see our Privacy Policy. Questions: hello@3rdpartylabs.com.