CredLens is a National Data Trust. 

In practice, that means doing more than just managing data: we have an obligation to govern it ethically, responsibly, and with purpose. Legally defined as a nonprofit steward of non-degree credential data, CredLens is built on clear governance, accountability, and a fiduciary duty to act in the best interests of those whose data we steward. 

In today’s world—defined by data breaches, opaque algorithms, and institutional “black boxes”, being a National Data Trust means that trust is not a leap of faith that we ask of our partners and clients, but a direct outcome of the policies, controls, and oversight mechanisms that define how data in our Trust is collected, protected, used, and shared. 

Security as a Value, Not a Feature

Security at CredLens was not “bolted on” after the fact. It was built into the platform from day one. We approached security as a foundational value—something inseparable from our mission—not as a checklist item or a feature. This mindset influences how we design our systems, evaluate data partners, and govern access to data.‍

CredLens’ prioritization of security is both intentional and a collective effort driven by our leadership. With strong support and involvement from both our Board of Directors and Technology and Security Advisory Board, we’ve worked to create a security-first culture that spans the entire organization. When the tone at the top is right, security becomes part of our DNA. - Erin Elliott, CredLens CISO

To ensure our internal standards meet external scrutiny, CredLens aligns its operations with respected security frameworks in the industry such as the SOC 2 Type II report,and ISO27001 certification which reflects our commitment to continuous oversight, disciplined processes, and accountability at every level of the organization. These benchmarks help ensure that the systems protecting individual records are resilient, auditable, and designed to evolve alongside emerging risks. 

Security Protects Data. Privacy Protects People.

While strong security controls are essential, they are only part of the story. Security and privacy are often treated as interchangeable, yet they serve different purposes. Security is about protection—the technical and organizational measures that keep data safe from unauthorized access or misuse. Privacy, however, is about integrity. It is the ethical standard by which we honor the promises we make to individuals about how their data is used, shared, and governed.

For CredLens, privacy begins with transparency. Organizations that share their data with us get control from day one over who can access their data, under what circumstances, and to what end - and they can change these permissions at any time. And while our partners have control over their data, we know that innovation thrives where there is collaboration, so when our partners decide that their data can be shared, it is done intentionally, securely and for clearly articulated purposes that create value for learners and the broader credential ecosystem. Anything less undermines the very trust a National Data Trust is meant to uphold.

Ultimately, our security framework exists to support our privacy commitments. We have engineered our systems to ensure that privacy mandates are technically enforced, moving beyond organizational policy to functional reality. That alignment between what we say and what we do is essential to earning the enduring trust of the people whose data we steward.

The Strength of a True Trust

The need for the CredLens National Data Trust exists because the credential ecosystem faces a fundamental challenge: the lack of verified, outcomes-based data for non-degree credentials. Learners invest time, effort, and money in credentials, yet too often there is limited visibility into whether those credentials lead to real economic and career outcomes. Furthermore, as the ecosystem continues to evolve, and stakeholders seek to generate innovative solutions for connecting education with employment outcomes, insight is needed to know which of these innovations are driving positive change in the ecosystem.

Data is the bridge that will help close this gap. When handled responsibly, it can illuminate pathways, validate value, and drive better decisions for learners, educators, employers, and policymakers alike. 

Our ability to act as an effective National Data Trust is predicated on our structural approach to trust that prioritizes privacy and security standards. At CredLens, trust is the foundation of our mission, the lens through which we design our systems, and the standard by which we measure our success. Because when trust is earned—and protected—data can do what it is meant to do: create clarity, expand opportunity, and empower people to build the futures they deserve.