Mexty wins ISO 27001 certification as AI training platform expands

Mexty said Tuesday it has secured ISO/IEC 27001 certification for its AI-native training infrastructure, a move the Paris-based company says strengthens security, governance and responsible AI use in enterprise learning. The platform is designed to help organizations build, validate and monitor AI-enabled training without replacing existing learning systems.

Why it matters: - Mexty is positioning security and governance as core requirements for enterprise AI training, not add-ons. - The certification could make the platform more attractive to organizations that need controlled, auditable AI use in learning and development. - The company is also signaling readiness for buyers facing GDPR and EU AI Act requirements.

What happened: - Mexty announced it has obtained ISO/IEC 27001 certification. - The Paris-based company says the certification covers its information security management system. - Mexty frames the platform as AI-native training infrastructure built to help organizations design, deploy, measure and govern AI-enriched learning experiences. - Hub​ert Maupas, Mexty cofounder and CEO, said the certification is an important step in building the infrastructure needed to deploy AI across the full training cycle.

The details: - Mexty says enterprise AI training needs more than AI content generators or standalone assistants. - The platform combines validated knowledge bases, AI-assisted creation, interactive activities, assessments, AI assistants, human review, version control, results analysis and training delivery in one environment. - Organizations can use Mexty’s integrated LMS or connect the platform to an existing external LMS. - Mexty says its system includes validated knowledge sources, human review and approval workflows, manual editing of all content, traceability and AI process controls. - The platform uses a multi-LLM approach, letting organizations choose models such as ChatGPT, Claude, Gemini or Mistral depending on the task. - Mexty says the required controls for SOC 2 Type II are fully implemented, and the attestation process is now in the required observation phase. - The company says the platform is designed to support compliance with GDPR and the EU AI Act.

Between the lines: - Mexty is drawing a line between “AI-assisted learning,” where AI speeds up discrete tasks, and “AI-native” learning infrastructure, where AI is embedded across the full workflow. - That framing suggests the company is aiming at buyers who want governance, traceability and human oversight, not just productivity gains. - The pitch also reflects a broader enterprise shift from experimentation with AI in training to controlled deployment at scale.

What's next: - Mexty appears to be targeting organizations that want to expand AI use in training while keeping existing learning systems in place. - The company’s next challenge is likely to prove that its governance-heavy model can deliver faster content production without adding friction for training teams. - Mexty says the organizations most likely to succeed with AI in learning will be those that build the strongest infrastructure around the tools.