Security & privacy
Built to protect students by default
Much of our audience is teenagers preparing for school-level certifications. That raises the bar: privacy is not a setting — it's the architecture.
Encrypted everywhere
All traffic runs over TLS; data is encrypted at rest in our database and storage layers.
Row-level access control
Every student record is protected by database row-level security: users can only ever read their own data. Writes go through trusted server code — never straight from the browser.
Private recordings
Speaking recordings and essays live in private buckets, accessible only through short-lived signed URLs issued to their owner.
Payments by Stripe
Card details never touch our servers. Checkout, invoices and the billing portal are handled end-to-end by Stripe, a PCI-DSS Level 1 provider.
Data minimization
We collect what the product needs to work — your profile, your answers, your progress — and nothing else. Your data is never sold or used to train third-party models.
Least-privilege services
AI grading runs in isolated server functions with scoped credentials. Admin and teacher actions are role-checked on every request, not just in the UI.
Found a vulnerability?
We take reports seriously and respond fast. Email hello@certifyboost.com with the details and we'll get back to you within two business days.
Walk into exam day already sure you'll pass
Start free with a real mock exam, daily boosters, and the first chapter of every course. No credit card required.