Trust, Standards & Governance
CNTE is a human-capital infrastructure platform connecting learning, verified capability, employment, enterprise, community transformation and measurable national development. Every claim on this page is evidence-based.
Credential standards
CNTE does not claim 1EdTech certification, accreditation or formal compliance until the relevant external processes are completed and documented.
Verification & revocation
Any CNTE credential can be publicly verified at /verify using its printed code or QR. Revoked or suspended credentials fail verification with their status displayed.
Signed Open Badges 3.0 / W3C VC 2.0 JSON-LD exports carry an Ed25519 digital proof; the issuer public key is published at /api/credentials/issuer.
Live registry: clearances: 39 · transcripts: 0 · admission letters: 12 · ipce certificates: 0 · alumni portfolios: 1 · cale certificates: 1 · nceti certificates: 0 · revocation registry entries: 0 · active share links: 3
Security practices
TLS encryption in transit, hashed passwords, JWT sessions, Microsoft Entra (OAuth 2.0) institutional sign-in, role-based least-privilege access, central audit logging with export, and production/test data separation.
External audit status: CNTE has not yet been independently audited. Audit-readiness preparation is in progress.
Open APIs
Documented, versioned, API-key gated partner endpoints for credential verification, signed exports and aggregated impact figures — with scopes, rate limits, key rotation and HMAC-signed webhooks.
Developer documentation →Privacy & consent framework
Users can view and download their data, manage optional consents, and file correction or deletion requests (deletion is honoured except where lawful institutional recordkeeping applies).
Learners control the sharing of their records via consent-scoped, expiring share links; institutionally verified achievements cannot be altered by the holder.
Privacy & Data Center →AI governance principles
AI contributes to assessments and recommendations but is never the sole final authority for high-stakes academic, disciplinary, employment or licensing decisions. Users are informed when AI contributes, may request human review, and authorized reviewers can override AI recommendations through documented appeal procedures.
GPS purpose limitation
Location capture is purpose-limited and point-in-time (e.g. geofenced logbooks, farm mapping, delivery confirmation). CNTE does not continuously monitor learners or workers, and stores only the precision and frequency an authorized purpose requires.
Contacts & reporting
Data governance: privacy@ciu.edu.lr
Security concerns: security@ciu.edu.lr
Credential concerns: registrar@ciu.edu.lr
Developers/partners: developers@ciu.edu.lr