Trust is the cornerstone of any successful partnership, which is why we provide every customer a reliable and secure SaaS offering. And since we believe trust also requires transparency, this page gives you an overview of how we protect your data and ensure compliance and system availability.
Availability
Your organization relies on access the availability of our software which thrives us to do everything in our power to ensure all systems are up and running at all times.
Security & Compliance
We are compliant with GDPR and have several measures in place to ensure security. We are even certified by the TUEV.
Resources
We believe in transparency and therefore want to make it easy for you to find all relevant security and trust resources in one place.
Our software is divided into multiple component services (Microservices) to quickly and accurately repair or update bits and parts of the product without compromising the integrity of the application.
With our state-of-the-art graph-based API (leveraging GraphQL developed by Facebook), we provide an excellent way to request exactly what you need, improving response times.
We're built ourselves on a modern technology stack and are happy to share it. Learn more on https://stackshare.io/leanix
We make the availability and response-times of our software publicly available to you via
http://monitoring.leanix.net/.
Using solutions like Pingdom and New Relic, we constantly monitor LeanIX’s performance to stay aware of issues.
Similar to a nurse in a hospital, our on-call engineer is always available to fix critical issues to ensure a speedy resolution.
LeanIX comes with a build in Identity Management and a comprehensive roles and rights model to ensure compliance.
Have a 3rd party SSO Identity Provider in place? Not a problem—LeanIX can easily integrate with all SAML 2.0 compliant providers.
Hosting via AWS and Strato allows LeanIX to be reached worldwide and guarantees maximum availability.
With ISO 27001 Certification for Information Security Management System, we comply with the highest, industry-leading global security standards.
With the TUEV Saarland 'Approved Data Protection' we are certified to fulfil legal requirements of data protection in our product and as a company.
Data is encrypted in transit using TLS 1.2 protocol with strong ECDHE ciphers.
To ensure data security on an employee level, passwords are hashed using a strong bcrypt algorithm. Strong password configurations are enforced in line with global best practices.
We follow the Principle of Least Privilege (PoLP) and employees are given only privileges that are necessary for performing their duties.
Our data center partners AWS and Strato comply to the highest standards and are e.g. ISO and SOC certified.
Penetration tests are performed on LeanIX by external experts and cover confidentiality and integrity aspects of the application.
With a dedicated LeanIX Security Team, we ensure data compliance and security and tackle new certifications.
