# Lantern

Protecting our customers’ information and their users’ privacy is extremely important to us. As a cloud-based company entrusted with some of our customers’ most valuable data, we’ve set high standards for security. We’ve received the SOC 2 certification from an individual third party auditor.

Lantern has invested heavily in building a robust security team, one that can handle a variety of issues — everything from threat detection to building new tools. In accordance with GDPR requirements around security incident notifications, Lantern will continue to meet its obligations and offer contractual assurances.

## Compliance

- SOC 2  
- GDPR  
- CCPACOMPLIANT  
- CCPA  
- HIPAA

## Controls

Updated 10 minutes ago

### Infrastructure security
- Unique production database authentication enforced
- Encryption key access restricted
- Unique account authentication enforced

### Organizational security
- Asset disposal procedures utilized
- Production inventory maintained
- Portable media encrypted

### Product security
- Data encryption utilized
- Control self-assessments conducted
- Penetration testing performed

### Internal security procedures
- Continuity and Disaster Recovery plans established
- Continuity and Disaster Recovery plans tested
- Cybersecurity insurance maintained

### Data and privacy
- Data retention procedures established
- Customer data deleted upon leaving
- Data classification policy established

## Subprocessors

- **Supabase**  
  Cloud provider  
  US and Germany  
  Used as an on-demand cloud database platform and APIs

- **Vercel**  
  Web Hosting  
  United States and for EU the traffic will be automatically routed to the nearest data center in Europe.  
  Used as web infrastructure and website security, providing content delivery network services, DDoS mitigation, internet security, and distributed domain name server services

- **Amazon Web Services, Inc**  
  Infrastructure - Regional Data Processing  
  United States, Ireland and/or Germany  
  Data warehouse solution which serves as the repository of data.