Trust & Security
How Skillhabit protects customer data—GDPR, ISO 27001, EU hosting, and where to check status.
Why This Page Exists
Buying or running a learning and certification platform means trusting someone with learner data, certificates, and sometimes commercial records. This page summarizes how Skillhabit approaches that trust—so you can decide with facts, not slogans.
Who This Is For
Administrators, security reviewers, procurement, and anyone asked “where does our data live?” or “are you ISO / GDPR ready?”
Part of the TicTac Group
Skillhabit is a TicTac Learn product and part of the TicTac Group. Information security and privacy practices for the platform sit with that organization. Legal documents (privacy policy, DPA, terms) live in the TicTac Trust Centre.
Hosted Entirely in the EU
Skillhabit runs entirely in the European Union. Production systems and the primary data stores your workspace uses are in the EU—so residency stays inside the EU for the platform itself.
GDPR
We design and operate Skillhabit for GDPR. Controllers keep their own obligations when they run a workspace; we support that with contracts and processes documented in the Trust Centre (including the Skillhabit DPA where applicable).
Practical takeaways for customers:
- Know who is controller vs processor for your use case (your organization vs Skillhabit as supplier)
- Use the Trust Centre for current privacy, cookies, and DPA wording—those documents win over marketing pages
- Limit who can see PII in the product with Users & Groups, managers, and App access
ISO 27001
TicTac Learn holds ISO 27001:2022 certification for information security management. That certification covers how we run secure operations for learning platform services—including Skillhabit.
Read the public announcement: TicTac Learn Achieves ISO 27001:2022 Certification.
System Status
Check live availability for the public site, application, and API on the Skillhabit status page:
Subscribe there if you want alerts when something changes.
Where to Go Next
| Need | Where |
|---|---|
| Privacy, DPA, terms | TicTac Trust Centre |
| AI Course Studio / image generation and OpenAI processing | AI Creation & Data Privacy |
| Corporate filters blocking Skillhabit mail | Allowlist Skillhabit Email |
| Live uptime | Skillhabit status |
| Sign-in and identity | External Identity Providers |
| Who can access what | Users & Groups · Configure |
If your security questionnaire needs details beyond this page, start from the Trust Centre and ask your Skillhabit / TicTac contact for the latest package.
