Trust & compliance library
Everything procurement, legal, and security teams ask for — in one place. For anything not listed, email [email protected].
Privacy & data processing
Standard processor obligations covering GDPR, UK GDPR, and CCPA. Pre-signed by Lepta — counter-sign and return.
Live list of every third-party processor we share Customer Data with, plus the regions and purpose.
How we handle personal information for visitors, accounts, and customers.
Security
Our SOC 2 controls, encryption, key management, retention, and incident-response practices.
Available under NDA. Email [email protected] and we'll send the latest report within 1 business day.
Latest third-party pentest report, available under NDA.
Contracts
HIPAA BAA, custom DPA terms, vendor-onboarding questionnaires (CAIQ, SIG Lite), regional data-residency commitments, and Enterprise redlines are all handled directly by our security team. Email [email protected] and we'll respond within 1 business day.