Skip to main content
    Transparency Center

    Compliance & Transparency

    Everything Keypra publishes about how the platform is built, how decisions are made, and how user data is handled — in one place. We chose to publish these methodologies rather than ship them as internal documents, so that learners, employers, regulators and auditors can verify the same evidence.

    Last reviewed: May 2026. Bumped on every material change to the underlying policy or methodology.

    EU AI Act

    How Keypra discharges its provider and deployer obligations under Regulation (EU) 2024/1689.

    AI Act Risk Classification

    Art. 6 + Annex III

    Keypra's self-classification: limited-risk and minimal-risk uses, not Annex III high-risk, not Art. 5 prohibited.

    AI Content Marking

    Art. 50

    How AI-assisted images, audio and text are marked, and the human-editorial exception for published text outputs.

    Competence Scoring Methodology

    Art. 14 + disclosed constants

    Pass mark, 4-dimension rubric, AI-maturity blend, and the contestability surface for AI-graded results.

    AI Literacy Index Methodology

    Art. 4 / Art. 13

    What the AI Literacy Index measures, how it is calculated, and how it relates to the workforce-literacy obligation.

    Behavioural Telemetry Methodology

    Art. 5(1)(f) / Annex III

    Why typing-cadence metrics are deterministic, member-private, and not emotion recognition or worker monitoring.

    Fairness & Bias Methodology

    Fairness controls

    Demographic-blind grading, annual aggregate score-distribution review, and the [FAIRNESS] triage tag.

    GDPR & Privacy

    Privacy and data-protection disclosures under Regulation (EU) 2016/679.

    Privacy Policy

    GDPR

    Full Privacy Policy including the retention schedule, jurisdictional addenda, breach procedure, and cookie inventory.

    DPIA Summary

    Art. 35

    Public summary of the Data Protection Impact Assessment for behavioural telemetry combined with AI-graded competence scoring.

    Data Processing Agreement

    Art. 28

    Standard DPA available to Enterprise customers, including SCCs, sub-processor commitments and breach-notification SLAs.

    Sub-Processors

    Art. 28(2)

    Maintained list of every sub-processor, transfer safeguard, and 30-day change-notice changelog.

    Security

    How the platform is protected, and how to reach us when something looks wrong.

    Security & incident response

    DPA §5 / Art. 33

    EU hosting, encryption, access control, email-channel handling, BYOK key protection, 72-hour breach notification, and coordinated vulnerability disclosure.

    Acceptance & Evidence

    How Keypra records consent, legal acceptance, and the integrity of methodology disclosures.

    Acceptance Methodology

    Accountability

    How the legal acceptance ledger captures Terms, Privacy and waiver acceptances with version checksums.

    Training Record Methodology

    AI Act Art. 4

    What the Learner Training Record PDF contains, how hours are counted, and how role-appropriateness is judged.

    Digital Services Act & Accessibility

    Platform-governance disclosures under EU 2022/2065 and the European Accessibility Act.

    DSA Notice & Action

    Art. 16

    Channel for reporting illegal content on publicly shared Keypra surfaces and the redress available.

    Accessibility Statement

    EAA

    Current accessibility posture, WCAG targets and the EAA micro-enterprise exemption position.

    Company information / Impressum

    EE / PL / DE

    Service-provider disclosure required by Estonian ITDS §9, Polish UŚUDE Art. 5 and German TMG §5.

    Questions about anything on this page? Privacy and DPO matters: privacy@keypra.com. Legal and contracts: legal@keypra.com. Security incidents: security@keypra.com.