Security
Security in how we build.
Our goal is to make security part of how Lorthen Software designs, develops, and maintains its products.
Development priorities
A product-specific approach.
As our products develop, we aim to formalize these practices for each product’s needs.
Access management
Define and review access for people, connected agents, integrations and service accounts.
Release review
Document testing and review requirements before broader release.
Data handling
Document the data each product uses, its purpose and the safeguards it requires.
Ongoing maintenance
Establish a process for updates, dependency reviews and responding to issues.
Independent assurance
Independent assurance goals.
SOC 2 Type II Planned
An independent examination and report on how a service organization’s controls operate over a period of time. Lorthen Software has not undergone this examination; it is a goal as products mature.
ISO/IEC 27001 Planned
Certification of an information security management system. Lorthen Software is not certified; establishing and certifying such a system is a longer-term goal.
If either is pursued, its coverage would depend on the defined services, systems, and scope of the assessment. No Lorthen app or client application would automatically inherit a certification.
Questions about how we build? Visit Contact for our email address. Online sending is unavailable.
Contact Lorthen