Compliance status
SOC 2 readiness
LeadNumbers is preparing for an independent SOC 2 audit. We are not currently SOC 2 certified, and no SOC 2 report has been issued.
The safeguards below are already part of how the service operates. Formal certification requires an independent auditor to test those safeguards and, for Type II, observe them over time.
Controls
Operating
Evidence
In progress
Audit report
Pending
Audit path
Where we are today
- 01
Operating controls
In place
Core access, privacy, retention and security safeguards are operating today.
- 02
Readiness evidence
In progress
Policies, access reviews, recovery tests and operating evidence are being assembled for review.
- 03
Independent audit
Not started
An independent auditor has not yet issued a SOC 2 Type I or Type II report for LeadNumbers.
- 04
SOC 2 report
Not available
There is currently no certificate or audit report to download. This page will be updated when that changes.
In operation
Controls already protecting client data
Role-based access and restricted administration
Client workspaces isolated from one another
Sensitive activity recorded for review
Encryption in transit and at rest
Automatic backups and documented recovery controls
Daily deletion of stored delivery files after 90 days
Dependency checks and protected server-side credentials
Privacy request, consent and permanent suppression workflows
Documents
What clients can request now
Data processing agreement
Processing terms and responsibilities for client data.
Security overview
A summary of active technical and organizational safeguards.
Privacy and retention details
How requests, consent, suppression and 90-day file retention work.
No certificate is available yet
SOC 2 reports are issued by independent auditors, not by software vendors themselves. When LeadNumbers has completed an audit, eligible clients will be able to request the report under appropriate confidentiality terms.