Yes. The storage 2LRN4 runs on is encrypted by default by our hosting provider StackIT: both the server disks and the object storage holding course material and videos.

In addition, the platform protects a number of particularly sensitive items separately. Mail server passwords and keys for connected service accounts are stored encrypted and are never shown again after saving; of API secrets we keep only an encrypted fingerprint, so they cannot be read back. In transit across the network, all traffic is encrypted with TLS.