OpenSesame Trust Center
This page outlines the high-level details of the different frameworks, regulations, and certifications that apply to our company as well as specific resources for services that OpenSesame offers.
OpenSesame has been the world’s leading marketplace for buying and selling e-learning courses since 2011, with buyers having access to the broadest and freshest selection of e-learning content from a global resource of industry-leading publishers all in one location. OpenSesame maps curated courses based on your business’ core requirements, syncing them with your LMS to increase utilization and continuously improve your Learning and Development programs. All OpenSesame content is SCORM/ AICC compliant and will work on any LMS.
Data privacy and security is paramount at OpenSesame, and we hold security, confidentiality, and availability of our systems in the highest regard - to this end we have invested in Security, GRC, and Privacy programs.
Our team is committed to safeguarding your data against potential threats and we are excited to share an overview of how we do that on this page!
For further information please reach out to your sales representative, Customer Success Manager at sales@opensesame.com
A-LIGN
Eden Data
Subprocessors
OpenSesame Trust Center Updates
Security Advisory – PHP Vulnerabilities (CVE-2026-109618 and CVE-2026-109619)
Security Advisory – Final Update
OpenSesame has completed patching and remediation of CVE-2026-109618 and CVE-2026-109619 across all OpenSesame applications. Our security investigation has identified no evidence of exploitation or unauthorized activity affecting customer data or services. No service interruptions are anticipated.
As part of our ongoing security due diligence, we are also confirming the status of relevant third-party service providers and subprocessors. We do not currently anticipate any customer impact from these dependencies.
OpenSesame considers its application-level remediation complete and will provide further updates if material new information becomes available.
OpenSesame is actively addressing CVE-2026-109618 and CVE-2026-109619. We have deployed web application firewall (WAF) countermeasures to reduce potential exposure and are actively working to patch affected systems. To date, we have identified no evidence of exploitation or compromise. Our investigation and remediation efforts remain ongoing, and we will provide updates as additional information becomes available. Further details are available upon request.