// Trust & Security Report

    Brilliant Worldwide, Inc. logo

    Brilliant Worldwide, Inc.

    Brilliant is an AI-powered interactive learning platform offering 90+ courses in math, computer science, science, and data analysis. The platform includes Koji, an AI personal tutor, and serves students from grade 5 through college. Includes Brilliant for Educators program for schools.

    Certifications held

    3

    Maturity

    Growth

    Trains on your data

    No

    Trust center

    No

    // Certification ledger

    Each held certification is backed by a verbatim quote from the vendor's own trust or security page. “Not confirmed” means we could not verify it publicly, not that the vendor lacks it.

    GDPR Compliance
    HELD

    Brilliant for Educators is designed in compliance with global privacy laws, including COPPA and FERPA in the US and GDPR in the EEA/UK

    Verify on educator.brilliant.org
    FERPA Compliance
    HELD

    Brilliant is a signatory to data privacy agreements based on the National Data Privacy Agreement (NDPA) and Student Data Privacy Consortium agreements; FERPA compliance explicitly stated

    Verify on educator.brilliant.org
    COPPA Compliance
    HELD

    Brilliant for Educators is designed in compliance with global privacy laws, including COPPA and FERPA in the US

    Verify on educator.brilliant.org
    > Show 10 unconfirmed / not-held certifications
    SOC 2 Type 1
    NOT CONFIRMED

    No public evidence found on vendor domain

    source: brilliant.org
    SOC 2 Type 2
    NOT CONFIRMED

    No public evidence found on vendor domain

    source: brilliant.org
    ISO 27001
    NOT CONFIRMED

    No public evidence found on vendor domain

    source: brilliant.org
    HIPAA
    NOT CONFIRMED

    Not applicable; HIPAA is for healthcare entities and health plans, not educational platforms

    source: brilliant.org
    ISO 27017 (Cloud security)
    NOT CONFIRMED

    No public evidence found on vendor domain

    source: brilliant.org
    ISO 27018 (Cloud PII)
    NOT CONFIRMED

    No public evidence found on vendor domain

    source: brilliant.org
    ISO 27701 (Privacy)
    NOT CONFIRMED

    No public evidence found on vendor domain

    source: brilliant.org
    ISO/IEC 42001 (AI governance)
    NOT CONFIRMED

    No public evidence found on vendor domain

    source: brilliant.org
    CSA STAR
    NOT CONFIRMED

    No public evidence found on vendor domain

    source: brilliant.org
    PCI DSS
    NOT CONFIRMED

    No public evidence found on vendor domain; not typically required for education platforms

    source: brilliant.org

    // Privacy & AI training

    Trains on customer data

    No

    Data processing agreement

    Offered

    Data region

    Not publicly specified; GDPR compliance implied for EU data

    Brilliant explicitly states they do NOT use or allow AI chat data to be used to train any third-party AI models. Platform uses AI chat data solely to improve their own AI features and services. Voice recordings are not stored or retained; voice input is processed only to generate text transcriptions and then discarded. AI chat conversations are retained indefinitely for improvement purposes.

    // Security controls

    Voice input handling

    Voice input is not stored or retained; it is processed by a third-party speech-to-text provider under zero-data-retention terms solely to generate text transcriptions, then discarded.

    brilliant.org

    Data deletion

    Users can request deletion of AI chat conversations; voice recordings automatically discarded after transcription.

    brilliant.org

    // Products & data scope

    Brilliant (Consumer)Educational Platform / AI Tutoring

    data: Student learning progress, course interactions, AI chat inputs (text, voice, image, video), user account data

    Serves individual learners grade 5 through college. Features Koji AI tutor. 10M+ learners globally. Subscription-based model.

    Brilliant for EducatorsEducational Platform / School Program

    data: Student learning progress, course interactions, classroom data via educator accounts

    Designed for schools and educators. Includes Data Privacy Agreements for schools. Compliant with FERPA, COPPA, GDPR.

    // What to watch

    • No trust center found on the vendor's own domain (brilliant.org). The domain brilliantmade.com / brilliant.tech belongs to a different, unrelated company (Brilliant Home Technology / Brilliant NextGen, a smart-home hardware maker in San Mateo); its trust center and security documentation do NOT apply to brilliant.org and were removed from this assessment
    • Encryption/MFA/password-hashing details are not published on brilliant.org's own domain; the previously cited facts came from the unrelated smart-home company and have been stripped
    • No evidence of enterprise-grade certifications (SOC 2, ISO 27001) found in public documentation
    • Company is growth-stage EdTech, not traditional enterprise SaaS; certification posture reflects educational market norms, not fintech/healthcare standards
    • Brilliant.org is primarily an educational platform, not an AI tool in the traditional AIFOXX sense (not an LLM API, image generator, or generative AI service)
    • Data residency not publicly documented; GDPR compliance implied but specific regions not stated
    • AI training policy is favorable (no third-party training) but unclear whether this applies to free vs. paid tiers or to educator programs

    // At a glance

    Pricing model

    Subscription (free and premium tiers for individuals; enterprise pricing for schools)

    Self-hostable

    No

    // How we verified this

    Every certification marked HELD is confirmed against a verbatim quote on Brilliant Worldwide, Inc.'s own trust, security, or privacy pages. We reject certifications claimed only on third-party aggregators, on a cloud host's behalf, or by a similarly named company.

    Last verified 2026-07-06. Compliance changes over time. Always confirm directly with the vendor before relying on any certification for a purchasing or compliance decision.

    brilliant.org

    > Browse all vendor trust reports