generated: '2026-07-17'
method: searched
source: openapi/360learning-*.json + https://360learning.com/privacy-and-security/
standards:
- id: oauth2
  conforms: true
  evidence: openapi securityScheme type oauth2; Client Credentials grant documented
- id: oauth2-client-credentials
  conforms: true
  evidence: token endpoint /api/v2/oauth2/token with grant_type client_credentials
- id: oidc
  conforms: false
  evidence: no openid-configuration; client-credentials only, no ID tokens
- id: rfc9457-problem-details
  conforms: false
  evidence: errors use a custom {code, message} JSON envelope, not application/problem+json
- id: cursor-pagination
  conforms: true
  evidence: Link header rel=next with encoded cursor (RFC 8288 web linking)
- id: rfc8288-web-linking
  conforms: true
  evidence: pagination signalled via Link header <URL>; rel="next"
- id: webhooks-signed
  conforms: true
  evidence: per-subscription signing secret + signature verification documented
- id: soc2-type2
  conforms: true
  evidence: 360Learning privacy-and-security page names SOC 2 Type II
- id: iso-27001
  conforms: true
  evidence: 360Learning privacy-and-security page names ISO 27001
- id: iso-27018
  conforms: true
  evidence: named for the Microsoft Azure hosting environment
- id: gdpr
  conforms: true
  evidence: GDPR and UK GDPR compliance program documented (DPO data-protection@360learning.com)
- id: csa-star
  conforms: true
  evidence: Cloud Security Alliance membership named on privacy-and-security page
compliance_page: https://360learning.com/privacy-and-security/