Question 1

Is LiveClass SOC 2 certified?

Accepted Answer

Yes. LiveClass is built and operated by BrainCert, Inc. Its application, API, database and recordings run inside the same SOC 2 Type II–audited AWS environment as the rest of the BrainCert platform, audited annually. Email support@liveclass.io to request the report under NDA.

Question 2

Where is data stored?

Accepted Answer

Account data, session records and recordings are stored on AWS in the United States. Live audio and video are routed in real time through the media region each session is pinned to, and are not stored unless a host records. Every provider involved is listed in our subprocessor list.

Question 3

How do you handle abuse or unwanted attendees?

Accepted Answer

Hosts can mute, remove, and revoke permissions mid-session. Attendees who are kicked cannot rejoin without a fresh token. Chat and Q&A are ephemeral — they are not persisted to a searchable history.

Question 4

How are recordings encrypted?

Accepted Answer

Recordings are stored in LiveClass’s AWS storage and encrypted at rest. They are available only to the organization that ran the session, through the app and API. Deleting a recording removes it; account-level deletion requests complete within 30 days.

Question 5

Do you sign a DPA?

Accepted Answer

Our Data Processing Agreement is part of the Terms of Service, so it applies to every customer automatically and meets GDPR Article 28. We will countersign a copy on request.

Question 6

How do I report a security issue?

Accepted Answer

Please email security concerns to support@liveclass.io with details and reproduction steps.