TecTony Learn
● LiveEnterprise-grade, PDPA-ready LMS & CMS — built on SOC 2 Type II and ISO 27001-certified cloud, with a Thailand data-residency deployment option and on-device biometric proctoring (no video ever leaves the device).
Standards & Compliance
- Built on SOC 2 Type II and ISO/IEC 27001:2022 / 27018-certified cloud infrastructure (Cloudflare global edge)
- On-device biometric proctoring (TecTony Verify) — facial identity match, on-screen presence and liveness run in the browser; no video ever leaves the learner's device, only evidence snapshots persist
- Anti-skip watch-time tracking, randomized in-session identity spot-checks, human-in-the-loop certificate issuance
- Verifiable certificates (QR + public verification page), realtime per-learner tracking, exportable CSV reports
- PDPA-ready — explicit consent including biometric consent (Section 26 / มาตรา 26), append-only audit trail, data-subject-request workflow (access / correction / erasure), configurable retention
- Passwordless + MFA authentication (email magic link · LINE Login · TOTP) with strict per-user data scoping
- WCAG 2.2 AA accessibility — axe-tested in CI, responsive down to 360px
- Serverless edge architecture — no fixed-server concurrency ceiling
- Optional Thailand data-residency deployment — sensitive data on ISO/IEC 27001 / 27017 / 27018-certified in-country cloud (AWS ap-southeast-7 or GDCC, the Thai government cloud)
Frequently asked questions
Is TecTony Learn suitable for regulated training like OIC broker-license courses?
Yes — it was built for exactly that: on-device biometric proctoring, anti-skip watch-time tracking, randomized identity spot-checks, an append-only audit trail and human-reviewed certificate issuance. It currently powers OIC broker-license training for a leading Thai insurance institute.
Does learner video ever leave the device?
No. Facial identity match, presence and liveness run in the browser via TecTony Verify. No video ever leaves the learner's device — only evidence snapshots persist, with explicit consent.
How does TecTony Learn handle PDPA, including biometric data?
It is PDPA-ready: explicit consent flows including biometric consent under Section 26 (มาตรา 26), an append-only audit trail, a data-subject-request workflow (access / correction / erasure) and configurable retention. An optional Thailand data-residency deployment keeps sensitive data in-country on ISO/IEC 27001 / 27017 / 27018-certified Thai cloud (AWS ap-southeast-7 or GDCC).
Can certificates be verified by third parties?
Yes — every certificate carries a QR code linking to a public verification page, and per-learner reports are exportable as CSV for regulators or HR.