Security

Honest account of how CoursePort handles access and data — written for buyers, not auditors.

No passwords, ever: you add us as a team/admin user where the platform supports it, and revoke access at cutover. Credentials are never stored after the engagement.
Student data: we move your content and your student data, exported under your own platform accounts and your students' existing enrollment relationship. Student data is handled per our service contract and never reused, sold, or shared.
Payments: checkout and card handling are done by Stripe; card numbers never touch our servers.
Client portal: workspace API keys are stored only as SHA-256 hashes; the key from checkout is revealed exactly once on the claim page and the stored copy is wiped at reveal. Inventory you submit in the portal belongs to your workspace only — no other client can read it.
Your inventory is yours: the source inventory CSV is delivered to you and stays yours whether or not you book a Move.

We are not SOC 2 certified and have not completed a third-party penetration test. We'll say so plainly until we have.
Platform export/import capabilities bound what can transfer; the Audit documents those limits per course before a Move is booked.

Email don+courseport@lifeofmorr.com with details. We aim to acknowledge within 2 business days.