Linte

Linte publishes an ISO certificate on its trust center; you can request access through SOC2C.

Linte's SOC 2 report is available on request. Request access through SOC2C and we coordinate the company-side NDA and delivery.

Security isn't a single yes/no, but Linte is SOC 2 Type II compliant and holds SOC 2 Type II, ISO 27001. SOC2C verifies its compliance posture and shows how strongly each fact is proven.

Linte hasn't listed a bug bounty or vulnerability disclosure program on SOC2C. Many companies accept security reports at security@linte.com or via a /security page (Linte lists a security contact).

Linte's subprocessors aren't listed on SOC2C yet. The company can add them so buyers can assess fourth-party risk.

Linte's hosting and data-residency details aren't listed on SOC2C yet. The company can add where it hosts (AWS, GCP, Azure) and which data it handles.

Linte's trust center is at https://trust.linte.com. Its verified SOC 2 status, frameworks, and documents are summarized on its SOC2C profile.

Connections are only allowed through channels using TLS 1.2 protocol or higher. We use encryption protocols both for data traffic in our web application (SSL), infrastructure and also for data stored at rest. To store the data at rest, we use Cloud Storage with encryption enabled, the keys being managed by Google itself, so in our buckets, all new objects, when they arrive, are encrypted when they are stored. Objects are also encrypted using server-side encryption using 256-bit ciphers (AES-256).

We do not collect any “sensitive data” about you (such as racial or ethnic origin, political opinions, religious/philosophical beliefs, trade union membership, genetic data, biometric data, health data, data about your life or sexual orientation, and offenses or alleged offenses) . What do we collect? Contact Details: Your name, email address… Details of your contracts: Your contract templates, smart fields, data integrated into third-party vendor contracts, counterparty names and email addresses, comments, activities on contracts, signatures… Data that identifies you: Your IP address, login information, browser type and version, time zone setting, browser plug-in types, geolocation information about where you might be, operating system and version…

Linte stores data using Google Cloud Storage and Amazon Web Services with multi-regional rules in order to provide high availability (>99.99%), high durability, low latency, and geo-redundancy. The regions are: Google Cloud Storage > us-central (Iowa) > us-east1 (South Carolina) > us-east4 (North Virginia) > us-west-1 (Oregon) > us-west-2 (Los Angeles) > We also open the possibility for enterprise customers to use southamerica-east1 (São Paulo). Amazon Web Services: 1. US East (N. Virginia): us-east-1 2. US East (Ohio): us-east-2 3. US West (N. California): us-west-1 4. US West (Oregon): us-west-2 We also open the possibility for enterprise customers to use sa-east-1 BR (São Paulo).

Yes, with any IDP (Identity Provider) that supports SAML 2.0 (Security Assertion Markup Language).

Data protection law means that we can only use your data for certain reasons and where we have a legal basis to do so. Here are the reasons for which we process your data: Keeping Linte running: Login and authentication Legal Basis: Contract + Legitimate Interests Improving Linte: Testing features, interacting with feedback platforms and questionnaires, managing landing pages, heat mapping our site, traffic optimization and data analysis and research, including profiling and the use of machine learning and other techniques over your data and in some cases using third parties to do this. Legal Basis: Contract + Legitimate Interests Customer Support: Notifying you of any changes to our service, solving issues via live chat support, phone or email including any bug fixing. Legal basis: Contract + Legitimate Interests Marketing Purposes (With your Consent): Sending you emails and messages about new features, products and services, and content. Legal basis for this data usage: Consent Here is what each of these "Legal Bases" mean: Consent: You have given clear consent for you to process your personal data for a specific purpose. Contract: Processing your data is necessary for a contract you have with us, or because we have asked you to take specific steps before entering into that contract. Legitimate interests: Processing your data is necessary for our legitimate interests or the legitimate interests of a third party, provided those interests are not outweighed by your rights and interests. These legitimate interests are: - Gaining insights from your behaviour on our website or in our app. - Delivering, developing and improving the Juro service. - Enabling us to enhance, customise or modify our services and comms. - Determining whether marketing campaigns are effective. - Enhancing data security. In each case, these legitimate interests are only valid if they are not outweighed by your rights and interests.