Security & Compliance
Protecting young creators and their data is our highest priority. We implement comprehensive security measures and work with industry-leading certified providers to ensure a safe learning environment.
Enterprise-Grade Infrastructure
We build with services covered under SOC 2 Type II and ISO 27001/27017/27018/27701 certifications.
Industry-Standard Practices
We use industry-standard security practices and rely on audited, enterprise-grade vendors for hosting and AI processing.
Application Security Controls
Our vendors maintain independent security audits. We implement our own access control, logging, secure development, and incident response.
Infrastructure Partner Certifications
Our infrastructure and AI processing partners maintain rigorous third-party certifications and undergo regular independent audits.
SOC 2 Type II
Our infrastructure providers maintain SOC 2 Type II certification, demonstrating rigorous security controls over extended audit periods.
ISO 27001
Information security management systems certification ensuring systematic approach to managing sensitive information.
ISO 27017
Cloud-specific security controls providing guidelines for information security in cloud services.
ISO 27018
Protection of personally identifiable information (PII) in public cloud computing environments.
ISO 27701
Privacy information management extending ISO 27001 for establishing, maintaining, and improving privacy practices.
Application Security Controls
Beyond our vendors' certifications, we implement comprehensive application-level security controls to protect customer data.
Access Control
Role-based access control (RBAC) with principle of least privilege. Multi-factor authentication required for all administrative access.
Data Encryption
All data encrypted at rest using AES-256 and in transit using TLS 1.3. Encryption keys managed through secure key management services.
Infrastructure Security
Enterprise-grade cloud infrastructure with multiple layers of protection, network isolation, and continuous monitoring.
Monitoring & Logging
Comprehensive logging and real-time monitoring of all system activities with automated alerting for suspicious behavior.
Incident Response
Documented incident response procedures with defined escalation paths and communication protocols.
Secure Development
Security integrated throughout our development lifecycle with code reviews, vulnerability scanning, and penetration testing.
Privacy & Data Protection
We adhere to applicable privacy regulations and implement additional protections specifically designed for young users.
Children's Privacy (COPPA)
Designed to support Children's Online Privacy Protection Act requirements, including parental consent and data minimization controls.
General Data Protection (GDPR)
Working toward GDPR readiness for users in the European Economic Area, with controls intended to support data subject rights and responsible processing.
California Privacy (CCPA)
Designed to support applicable California Consumer Privacy Act rights and requests.
Report a Vulnerability
We appreciate the security research community. If you discover a potential security issue, please report it responsibly to our security team.
Parent Access & Oversight
We provide parents with the ability to review their child's activity and request account deletion at any time. Parents receive a secure, password-free magic link via email that grants instant access to a dedicated dashboard — no account creation required.
Security Disclaimer
While Dream Engine employs industry-standard security measures and partners with certified infrastructure providers, no system connected to the Internet can be guaranteed to be 100% secure. We continuously work to protect the integrity and confidentiality of user data, but we cannot warrant or guarantee that our security measures will prevent all unauthorized access, data breaches, or security incidents.
DREAM ENGINE, ITS AFFILIATES, DIRECTORS, OFFICERS, EMPLOYEES, AND AGENTS SHALL NOT BE LIABLE FOR ANY UNAUTHORIZED ACCESS TO, ALTERATION OF, OR THE DELETION, DESTRUCTION, DAMAGE, LOSS, OR FAILURE TO STORE ANY DATA, INCLUDING PERSONAL INFORMATION, CONTENT, OR COMMUNICATIONS MAINTAINED BY OR ON BEHALF OF THE PLATFORM. YOU USE THE PLATFORM AND TRANSMIT INFORMATION AT YOUR OWN RISK.
Users are encouraged to practice good security hygiene, including using unique passwords, not sharing account credentials, and promptly reporting any suspicious activity. For security concerns, contact us at security@dreamengine.kids.
Compliance & Data Privacy
Answers to the most common questions from school districts, IT review teams, and administrators evaluating Dream Engine Kids for classroom use.
Have additional compliance questions or need a formal data privacy agreement?
support@dreamengine.kids