The five questions corporate security teams
ask us most — answered in one place
Certification scope · data protection · vendor due diligence · uptime under load · legal risk —
the checkpoints buyers review before adopting an enterprise LMS.
Key indicators for security teams
The objective baseline TouchClass maintains.
Frequently asked security questions
The questions enterprise security teams raise most often during LMS evaluations.
- Infrastructure security: Operated on AWS with a global cloud-security architecture.
- Domestic data governance: All data is stored and processed in the AWS Seoul region, with no cross-border transfer.
- Standard encryption: Applied to data both at rest and in transit.
- Access control: Least-privilege principle — only authorized personnel can access data.
- Data-loss prevention: Screen-capture prevention and watermarking prevent asset leakage.
- Structured security evidence & guidance: Drawing on our top-rated vendor-assessment track record, we provide standard evidence materials for your due diligence.
- Pre-adoption guidance: From the security pre-assessment stage, we provide practical guidelines to ease the load on your teams.
- High-performance architecture for heavy traffic: Optimal learning performance without latency, even under bursty traffic.
- Non-stop service on a high-availability architecture: AWS Multi-AZ redundancy minimizes outage risk.
- Rapid incident response and recovery: Standardized procedures restore service quickly to protect business continuity.
- Punitive fines up to 3–10% of total turnover (Article 64-2)
- Punitive damages of up to 5× actual damage (Article 39)
- CEO / representative liability sanctions (Article 30-3)
- Administrative penalties for safety-measure violations (Articles 75 and 66)
Go deeper
Review the reasoning and evidence for each topic on its dedicated page.
AI data privacy & ethics principle
“TouchClass does not use any knowledge asset generated or provided by our customers during AI-service usage as training data for AI models.”
- Zero Data Training
(no customer data used for AI training) - Privacy-by-Design
AI architecture - Compliance with data-protection laws
and AI ethics guidelines















