Price indexation 2027, automatic user management and renewed courses

Highlights this half-year

1. A European platform, from a European company

   Since August, 2LRN4 has been running in a new, more powerful environment at STACKIT, a German cloud provider with data centres in Germany. Your data is therefore not only on European servers, but also with a European company. It falls under European law only, and not under American laws such as the CLOUD Act, which can require an American provider to hand over data even when it is stored in Europe. Email from the platform also goes through a European provider. Many providers of security awareness training run on American cloud platforms such as AWS. With 2LRN4 you choose a European alternative, which makes it easier to show that you protect your employees' data properly.

   We make one deliberate exception. We send the emails for phishing simulations through a mail provider that specialises in them, because European sending services often refuse such practice emails. That provider has some of its servers outside the EU and only sees the recipient's name and email address and the text of the practice email. Which employees click a link and what happens next is recorded on our own platform in Germany, as are all the results of the simulation.

   Where is 2LRN4 hosted?

2. Renewed courses for years 1 to 5

   The courses for years 1 to 5 have been rebuilt, with new videos, current examples and descriptions in all 27 languages. We also changed the format. A course used to consist of an e-learning with two separate videos, one about a work situation and one about a private situation. The videos are now part of the e-learning itself, so the examples from work and private life tie in directly with the explanation. Year 6 is almost ready.

   For some courses, board members and IT already get their own module, tailored to their role. You choose per organisation or per department which profile applies, or you let learners choose for themselves. That way a board member does not take the module intended for IT staff. We are extending this: more courses will get separate versions for employees, for IT and security, and for board members.

   View the courses

3. Tests maintained centrally by 2LRN4

   2LRN4's tests are now maintained centrally, so new and improved questions reach every organisation automatically. Want to adapt a question to your own policy? Switch off the central question and create your own version. Every test for years 1 to 5 has 25 questions, spread over five levels from very easy to very hard. A learner gets 10 of them each time and passes with 70% correct.

   Read the release notes

4. Keeping employees up to date automatically

   With the new SCIM integration, your own environment sends new employees, changes and leavers to 2LRN4 itself. This works from Microsoft Entra, Okta and Google, without us getting access to your environment. The integration is free. If you use Google Workspace, you can now also synchronise employees from there. In addition, you set per organisation after how long inactive accounts are deleted automatically, so you do not keep personal data longer than necessary.

   Read the SCIM how-to

5. See how things are going at a glance

   At the top of the dashboard, a health bar shows whether anything needs attention, such as accounts that log in without two-factor authentication or a Microsoft Entra integration that no longer works. Below it, four figures show learning progress: the completion rate, active learners, inactive learners and the backlog. On the organisation page you see when your licence ends and how many seats are in use. If an employee does not receive an email, you can see for that user which emails were sent and why an email may have been held back.

   Read the release notes

6. Email from your own address, and fairer phishing results

   You can now also have the platform's emails sent from your own email address, through Microsoft 365, Google Workspace or your own mail server, so employees recognise the sender more easily. The platform automatically holds back email to addresses that no longer exist. In phishing simulations, clicks by mail scanners no longer count as clicks by employees, so the results show what your employees really do.

   Read the release notes