// Trust & Security Report
Century Tech
CENTURY is an AI-powered adaptive learning platform for schools and colleges, covering English, Maths, and Science across Primary, Secondary, and Further Education levels. Core algorithm uses machine learning to personalize student learning pathways based on individual performance patterns.
Certifications held
2
Maturity
Growth
Trains on your data
Yes
Trust center
No
// Certification ledger
Each held certification is backed by a verbatim quote from the vendor's own trust or security page. “Not confirmed” means we could not verify it publicly, not that the vendor lacks it.
Verify on support.century.tech“CENTURY complies with all relevant GDPR and data protection regulations both in terms of data processing and our internal processes.”
Verify on learn.microsoft.com“Publisher Attestation: The information on this page is based on a self-assessment report provided by the app developer on the security, compliance, and data handling practices followed by this app. Microsoft makes no guarantees regarding the accuracy of the information.”
> Show 8 unconfirmed / not-held certifications
source: learn.microsoft.comHas the organization achieved a Service Organization Controls (SOC 2) Certification? No
source: learn.microsoft.comHas the organization achieved a Service Organization Controls (SOC 2) Certification? No
source: learn.microsoft.comIs the app International Organization for Standardization (ISO 27001) certified? No
source: learn.microsoft.comDoes the app comply with International Organization for Standardization (ISO 27017)? N/A - no public evidence of certification
source: learn.microsoft.comDoes the app comply with International Organization for Standardization (ISO 27018)? N/A - no public evidence of certification
source: learn.microsoft.comDoes the app comply with the Health Insurance Portability and Accounting Act (HIPAA)? N/A - not applicable to education platform
source: learn.microsoft.comIs the app Federal Risk and Authorization Management Program (FedRAMP) compliant? No
source: learn.microsoft.comHas the app been Cloud Security Alliance (CSA Star) certified? No
// Privacy & AI training
Trains on customer data
Yes
Data processing agreement
Offered
Data region
EU/UK for European customers; AWS hosting (multiple regions including EU)
CENTURY uses anonymized data generated through platform usage to improve recommendation algorithms for personalized learning pathways. The platform does NOT sell or monetize personal data. Data is anonymized before algorithm training use. Policy states parental consent is obtained for data collection from minors (under 16).
// Security controls
Multi-Factor Authentication (MFA)
Enabled for code repositories, DNS management, and credential stores
learn.microsoft.comChange Management Process
Yes, formal process in place; additional person reviews/approves all code changes before production deployment
learn.microsoft.comRegular Log Review
No - logs are NOT reviewed on a regular cadence by human or automated tooling
learn.microsoft.comSecurity Incident Response Process
No formal process documented - alerts sent to employees for triage, but no formal documented incident response process
learn.microsoft.comEmployee Account Provisioning
Yes, formal process for provisioning, modification, and deletion
learn.microsoft.comAnti-malware and Application Controls
Yes, both traditional anti-malware protection and application controls deployed
learn.microsoft.comPatch Management
Yes, policy governs SLA for patch application; activities carried out according to policy
learn.microsoft.comUnsupported OS/Software
No unsupported operating systems or software in environment
learn.microsoft.comAutomated Security Alerts
Yes, alerts sent automatically to employee for triage when security events detected
learn.microsoft.com// Products & data scope
Data it handles: Student learning data, performance records, interaction logs; Teacher dashboards and performance analytics
Core product for schools and colleges. Covers English, Maths, Science for Primary, Secondary, and Further Education. Uses AI algorithms trained on anonymized aggregate data to personalize learning pathways.
Data it handles: Student learning data for tutoring contexts
Variant of platform for individual tutoring businesses; same underlying data handling practices
// What to watch
- Century Tech does not hold SOC 2 or ISO 27001 certifications despite being a vendor handling sensitive K-12 student data. This is a significant gap for an EdTech vendor processing educational records of minors.
- There is no formal documented security incident response process, only automated alerts to employees. This is a security maturity gap.
- Logs are not regularly reviewed by humans or automated tooling, which limits visibility into potential security events.
- There is no public trust center or dedicated security documentation page; compliance details are only available via the Microsoft 365 attestation.
- CENTURY uses student performance and interaction data (anonymized) to train and improve personalization algorithms. While anonymized, schools and parents should be explicitly informed that this data feeds model training.
- The Microsoft form answers 'Is AI functionality part of core features?' with No, yet CENTURY is explicitly marketed as an 'AI-powered' platform. This suggests a possible misunderstanding in the attestation or a different interpretation of 'core feature' versus 'core product'.
- CENTURY collects data from minors under 16 with parental consent obtained. Verify that schools are obtaining proper consent as intermediaries.
- A DPA exists per the company's GDPR posture, but the full DPA terms are not publicly accessible.
- A disaster recovery plan is documented, but there is no evidence of regular testing or verification of restore capability.
// At a glance
Pricing model
Subscription-based (details not publicly available; contact required)
Self-hostable
No
// How we verified this
Every certification marked HELD is confirmed against a verbatim quote on CENTURY Tech's own trust, security, or privacy pages. We reject certifications claimed only on third-party aggregators, on a cloud host's behalf, or by a similarly named company.
Last verified 2026-07-09. Compliance changes over time. Always confirm directly with the vendor before relying on any certification for a purchasing or compliance decision.
century.tech