Lantern

Protecting our customers’ information and their users’ privacy is extremely important to us. As a cloud-based company entrusted with some of our customers’ most valuable data, we’ve set high standards for security. We’ve received the SOC 2 certification from an individual third party auditor.

Lantern has invested heavily in building a robust security team, one that can handle a variety of issues — everything from threat detection to building new tools. In accordance with GDPR requirements around security incident notifications, Lantern will continue to meet its obligations and offer contractual assurances.

Compliance

• SOC 2
• GDPR
• CCPACOMPLIANT
• CCPA
• HIPAA

Controls

Updated 10 minutes ago

Infrastructure security

• Unique production database authentication enforced
• Encryption key access restricted
• Unique account authentication enforced

Organizational security

• Asset disposal procedures utilized
• Production inventory maintained
• Portable media encrypted

Product security

• Data encryption utilized
• Control self-assessments conducted
• Penetration testing performed

Internal security procedures

• Continuity and Disaster Recovery plans established
• Continuity and Disaster Recovery plans tested
• Cybersecurity insurance maintained

Data and privacy

• Data retention procedures established
• Customer data deleted upon leaving
• Data classification policy established

Subprocessors

• Supabase
  Cloud provider
  US and Germany
  Used as an on-demand cloud database platform and APIs

• Vercel
  Web Hosting
  United States and for EU the traffic will be automatically routed to the nearest data center in Europe.
  Used as web infrastructure and website security, providing content delivery network services, DDoS mitigation, internet security, and distributed domain name server services

• Amazon Web Services, Inc
  Infrastructure - Regional Data Processing
  United States, Ireland and/or Germany
  Data warehouse solution which serves as the repository of data.