Skip to main content

Security

Designed with security and accountability in mind.

Training records are operational records. Trainix is built so organizations can control who has access, see how the system is used, and keep documentation in a protected environment.

The details below are meant for command staff, IT, and procurement. They describe how Trainix approaches security. They are not a substitute for a security review, and they do not claim certifications Trainix does not hold.

Access control

Access is granted according to organizational roles and administrative settings. Users see the training records and functions they are authorized to use.

Authentication

Trainix uses secure, passwordless sign-in with one-time codes delivered to authorized email addresses. Sessions are time-limited and access attempts are recorded.

Data protection

Training records are stored in controlled organizational workspaces. Data in transit is encrypted. Administrative access is separated from day-to-day training work.

Auditing

Significant actions — including sign-in, record changes, and administrative updates — are written to an activity history that authorized administrators can review.

Infrastructure

Trainix is hosted on established cloud infrastructure with encrypted storage, routine patching, and controlled production access.

Operational security

Production access is limited. Changes follow a controlled release process. Application traffic is served over HTTPS with standard browser security protections.

Privacy

Trainix is designed to hold only the training and account information an organization needs to run its program. We do not sell customer data. Procurement and privacy reviews are handled directly with your organization.

What we will discuss in a security review

Buyers evaluating Trainix often need more than a public webpage. We will walk through access, retention, and operational controls with the people responsible for the system.

  • organizational access and administration
  • authentication and session handling
  • record retention and export expectations
  • hosting and data protection practices

If your department requires a security questionnaire or a call with information security staff, start with a demo request and note that in the message.