Leverage drives transparency and alignment across teams while automating what was previously manual data entry. With this level of data transparency also comes great responsibility to maintain the highest standards of data privacy and security.
With an ongoing focus on security, data privacy, and GDPR-readiness, we aim to strike a balance between transparent communications and maintaining your employee's and customer's privacy rights.
"Without our customers, we are nothing - so every decision we make is with the customer first. At Leverage, our team operates around the clock to uphold customer trust and stay abreast of the evolving security landscape through meticulous, ongoing research by both our team and expert advisors. World class security controls and privacy policies are Leverage's #1 priority."
We are SOC 2 Type 1 certified and actively postured for SOC 2 Type 2 certification in the near term, with a security posture and controls meticulously aligned with SOC 2's rigorous standards. This dual approach underscores our commitment to organizational oversight, vendor management, risk management, and regulatory compliance. Our established procedures and controls not only meet SOC 2 criteria today but are designed to sustain the elevated requirements of ongoing SOC 2 Type 2 certification, ensuring a resilient and forward-thinking security foundation.
We have completed the CSA STAR Self-Assessment and align with the industry-leading security principles outlined by the Cloud Security Alliance. Our commitment to cloud security is demonstrated through our adherence to their best practices.
We have actively prepared for a FedRAMP authorization, with our security posture and cloud infrastructure designed to align with the stringent security and risk management standards outlined in the FedRAMP Moderate baseline. Our robust controls and procedures adhere to the NIST SP 800-53 framework, ensuring we meet the comprehensive security requirements expected by federal agencies. While we await an agency sponsor to formally begin the authorization process, our cloud security infrastructure is positioned to meet the criteria necessary for FedRAMP certification, ensuring the security and integrity of government data.
Leverage uses Amazon Web Services (AWS) exclusively for hosting staging and production environments. AWS data centers are monitored 24×7 with biometric scanning, video surveillance, and other advanced security measures. AWS is SOC 1, SOC 2, SOC 3 certified, and holds ISO 27001, ISO 27017, ISO 27018, and ISO 9001 certifications. These standards ensure rigorous security practices, privacy protections, and quality management systems across all AWS services.
