Skip to content
LeanSuite
Trust Center

LeanSuite SOC 2 report

Our SOC 2 Type 1 report is confidential. Accept the confidentiality terms and your copy downloads right away.

Report
SOC 2 Type 1 report on the LeanSuite Platform
As of
December 9, 2024
Trust services criteria
Security and Confidentiality
Independent auditor
Laika Compliance LLC

What's inside

  • The independent service auditor's report
  • LeanSuite management's assertion
  • A description of the LeanSuite Platform
  • The trust services criteria and LeanSuite's related controls

Need a penetration test summary, a completed security questionnaire or our DPA? Email support@theleansuite.com.

Download the report

Use your work email. Your copy downloads as soon as you accept the terms.

Security Document Confidentiality Terms

  1. Who these terms are between. These terms are between Leansuite.com Corp. ("LeanSuite") and you, and the organization you represent (together, "Recipient"). By ticking the box and downloading, you accept them for yourself and for that organization, and you confirm you are authorized to do so.
  2. What is confidential. "Confidential Information" means the SOC 2 report and any other security documentation LeanSuite provides through this page, including the independent auditor's report, LeanSuite's system description and its controls.
  3. How you may use it. Recipient will use the Confidential Information only to evaluate LeanSuite's security as a current or prospective customer or partner, and for no other purpose.
  4. Who you may share it with. Recipient will not disclose the Confidential Information to any third party. Within Recipient's organization it may be shared only with employees and professional advisers who need it for that evaluation and who are bound by confidentiality obligations at least as protective as these terms, and Recipient will tell them these terms apply.
  5. Safeguards. Recipient will take all reasonable steps to keep the Confidential Information from third parties, will not post or upload it anywhere public, and will not remove its confidentiality markings.
  6. What is not covered. These obligations do not apply to information that is or becomes public through no fault of Recipient, that Recipient already lawfully had, or that Recipient must disclose by law, provided Recipient gives LeanSuite prompt notice where the law allows.
  7. Ownership. The Confidential Information and every copy of it remain LeanSuite's property. These terms grant no license. The report describes LeanSuite's controls as of the date stated in it and is provided as is.
  8. Return or deletion. At LeanSuite's request, Recipient will return or delete all copies of the Confidential Information, including notes that contain it.
  9. What we record. When you download, we record your name, work email, company, job title, the date and time, your IP address and your acceptance of this version of the terms. We use these details as described in our Privacy Notice.
  10. Governing law and questions. These terms are governed by the laws of the Province of Ontario, Canada. Questions: support@theleansuite.com.

Also on its own page: read the terms.

We record each download and may follow up about LeanSuite. See our Privacy Notice.

How you get the report

  1. 1

    Enter your work email

    In the form on this page.
  2. 2

    Accept the confidentiality terms

    They ask you to keep the report within your review team.
  3. 3

    Your copy downloads

    Right away, as soon as you accept.
The report is confidential, which is why the terms come first.

Type 1 and Type 2: a point in time or a period

Type 1

Controls are properly designed, at one point in time. LeanSuite has this report, as of December 9, 2024.

Type 2

Controls worked, tested over a period of time. On track for the audit. No date published.

Type 1 is a single dot on a timeline, as of December 9, 2024: controls properly designed at that point. Type 2 is a span along the timeline: controls tested over a period. LeanSuite has the Type 1 report and is on track for the Type 2 audit, with no date published.

LeanSuite is SOC 2 Type 1 compliant, with a report as of December 9, 2024, and on track for the Type 2 audit. No Type 2 date is published.

FAQs

About our SOC 2 report

  1. SOC 2 isn't a certificate: an independent auditor examines a company's controls and issues a report. LeanSuite is SOC 2 Type 1 compliant, with a report from Laika Compliance LLC as of December 9, 2024.

  2. The Security and Confidentiality trust services criteria for the LeanSuite Platform. It includes the auditor's report, management's assertion, a description of the platform and the controls mapped to each criterion.

  3. Not yet. A Type 1 report attests that controls are properly designed at a point in time; a Type 2 report tests that they worked over a period. We are on track for the Type 2 audit, and no date is published.

  4. The report is confidential. The terms ask you to keep it within your review team, and your copy downloads as soon as you accept them.

  5. Yes. Once a year on request we complete your security questionnaire and share a summary of our latest penetration test, and our data processing agreement is available too. Email support@theleansuite.com.