Security
Our own security, stated plainly
A short list you can check is worth more than a wall of badges. Here is where TrustLynce stands today.
Certification status
TrustLynce does not yet hold a SOC 2 report or an ISO 27001 certificate. We are working toward both. They will appear on our Trust Center when they are issued, and not before.
How this website protects you
- It is served only over HTTPS, with HTTP Strict Transport Security set for two years, subdomains included.
- Other sites cannot frame it, which blocks clickjacking.
- Browsers are told not to guess content types, and the site asks for no camera, microphone or location access.
- Forms collect the minimum. There is no phone field, and submissions go to our team rather than into a database on the site.
- Analytics runs only if you accept it, and personal data is removed before any event is sent.
- Credentials such as webhook addresses stay on the server and never reach your browser.
The TrustLynce platform
This page describes the website. For security documentation about the TrustLynce platform, ask us, and we will tell you what exists today and what is still in progress.
Report a vulnerability
If you believe you have found a security issue in this site or in TrustLynce, email hello@trustlynce.com with the details. Please do not access data that is not yours, and do not disrupt the service while testing.
Find out what your compliance program actually looks like
Thirty minutes, your real systems, no slideware. We'll show you what we'd automate first, and what you don't need us for.