Technology & Security
How it is built and how it protects.
Public: a general overview of operation in the EU, data protection and the handling of AI. The in-depth details — architecture, data flows, individual protective measures — are visible only to signed-in administration and operators.
Technische details alleen na inloggen
Architectuur, gegevensstromen en beschermingsmaatregelen in detail zijn bedoeld voor de auditors van de instelling en zijn niet openbaar. Ingelogde administratie en beheerder zien ze hier volledig.
Inloggen als administratieVoor
14 van 14 items
- Technology & SecurityuitgebreidHow the platform is builtA web application that runs in the browser, with a relational database in Frankfurt and data centres in the EU — multi-tenant, multilingual, secured by thousands of automated tests.StudentenDocentenAdministratieBeheerder
- Technology & SecurityuitgebreidOperation and data in the EUDatabase, files and server functions are in Frankfurt — as a hard rule in the code that an automated test checks on every change. Individual services such as speech output work in the USA; they are named.StudentenDocentenAdministratieBeheerder
- Technology & SecurityuitgebreidAI on the platform — what it may and may not doAI writes suggestions, presents courses and answers questions — labelled, bound to sources and with fixed limits: it does not assess exam behaviour and decides nothing that a person must decide.StudentenDocentenAdministratieBeheerder
- Technology & SecurityuitgebreidArchitecture and hostingThe building blocks of the installation, their locations and how a request runs through them.AdministratieBeheerder
- Technology & SecurityuitgebreidDatabase and tenant separationEvery table carries the organisation; the database itself decides who sees which row.AdministratieBeheerder
- Technology & SecurityuitgebreidAI models and speech servicesWhich kind of service is used for what, where it works and what it gets to see — described by function, not by provider.AdministratieBeheerder
- Technology & SecurityuitgebreidSign-in, second factor and encryptionHow accounts, sessions and secrets are protected.AdministratieBeheerder
- Technology & SecurityuitgebreidProtection against injected code and abuseContent security policy with a nonce per request, origin check, limits per network address and bot defence.Beheerder
- Technology & SecurityuitgebreidAI guardrailsImmutable rules before every model call, a deterministic check of every input and a check of every output — with a log.AdministratieBeheerder
- Technology & SecurityuitgebreidCost recording and usage limitsEvery call to an external service goes through one single recording point; limits apply in stages.Beheerder
- Technology & SecurityuitgebreidBackground runsScheduled runs for reminders, cost warnings, reports, fact checks, deletion calendar, learning data and pre-production.Beheerder
- Technology & SecurityuitgebreidTests and guardsAround 3,400 automated tests, including 142 guards that permanently prevent mistakes once made — each with a counter-check.Beheerder
- Technology & SecurityuitgebreidData flowsWhat flows where when a question is asked in a course, when a course is built and when an exam is taken.AdministratieBeheerder
- Technology & SecurityuitgebreidLoad test for many concurrent usersA tool that measures how many concurrent users the installation can handle — with a request cap, abort under overload and a report as a file. Measured up to 150 reading users; the large stages run as a project service against a preview environment.Beheerder