Mexty earns ISO 27001 as it pushes enterprise AI learning infrastructure

Mexty said Sept. 17 that it has achieved ISO/IEC 27001 certification, a step the Paris-based learning platform says supports more secure and governed enterprise AI adoption. The company is positioning its platform as AI-native infrastructure for learning teams that need validation, traceability, and compliance controls.

Why it matters: - Mexty is targeting companies that want to move AI deeper into learning and development without losing control over security, governance, and data handling. - The ISO/IEC 27001 certification gives Mexty a formal information security benchmark as enterprises face tighter expectations around AI use, privacy, and oversight. - Mexty is also designed to support organizations working under GDPR and the EU AI Act.

What happened: - Mexty announced on Sept. 17 that it achieved ISO/IEC 27001 certification. - The company is based in Paris, Île-de-France, France. - Mexty said the certification marks a milestone in its push to support responsible AI use in learning environments. - Founder and CEO Hubert Maupas said the challenge is deploying AI across the full learning lifecycle while keeping control over data, sources, generated content, human validation, and governance rules.

The details: - Mexty describes its platform as an AI-native learning infrastructure built to help organizations design, deploy, measure outcomes, and govern AI-enhanced learning experiences. - The platform connects validated knowledge sources, AI-assisted creation, interactive activities, assessments, AI assistants, human validation, version management, outcome analytics, and learning delivery in one environment. - Organizations can use Mexty’s integrated learning management system or connect the platform to an existing external LMS. - Mexty says the platform includes validated knowledge sources, human review and approval workflows, manual editing alongside AI-assisted editing, version management, traceability, and governance controls for AI-enabled processes. - The platform uses a multi-LLM approach and can work with models including ChatGPT, Claude, Gemini, or Mistral depending on the task. - Mexty said the controls required for SOC 2 Type II are fully implemented, and the attestation process is in the required observation phase.

Between the lines: - Mexty is drawing a line between AI tools that speed up content creation and infrastructure that governs AI across the whole learning workflow. - That framing reflects a broader enterprise shift from experimentation to controlled deployment, especially where training content, learner data, and auditability matter. - The company is trying to make security and governance part of the product architecture rather than add-ons. - Mexty’s positioning suggests it wants to be infrastructure for organizations that keep an existing learning ecosystem but want AI-native capabilities layered into it.

What's next: - Mexty is likely to lean on the certification as it sells into enterprise learning teams that need security and compliance assurances. - The company expects AI-native learning infrastructure to become the next phase after basic AI-assisted learning tools. - Mexty says that phase will connect trusted knowledge, creation, human validation, practice, assessment, learner support, outcome analysis, and continuous improvement. - The company says the goal is not to replace instructional designers, trainers, teachers, or subject-matter experts, but to give them infrastructure to deploy AI securely and responsibly.

The bottom line: - Mexty is betting that enterprise buyers will choose learning platforms built around governance and security, not just faster content generation.