Security

Last Updated: March 18, 2024

At LeadGPT, security is our top priority. We employ industry-leading security measures to protect your data and maintain the trust of our insurance agent partners.

SOC 2 Type II

Certified security controls and processes

HIPAA Compliant

Protected health information safeguards

ISO 27001

Information security management

Security Features

Authentication & Access

  • Multi-factor authentication
  • Single sign-on (SSO)
  • Role-based access control
  • Session management
  • Password policies

Data Protection

  • AES-256 encryption at rest
  • TLS 1.3 encryption in transit
  • Regular backups
  • Data redundancy
  • Secure key management

Infrastructure Security

  • DDoS protection
  • Web application firewall
  • Network monitoring
  • Vulnerability scanning
  • Intrusion detection

Operational Security

  • Security training
  • Access reviews
  • Change management
  • Incident response
  • Audit logging

Compliance & Certifications

Industry Standards

  • SOC 2 Type II certified
  • HIPAA compliant
  • ISO 27001 certified
  • NIST Cybersecurity Framework
  • GDPR compliant

Regular Assessments

  • Penetration testing
  • Vulnerability assessments
  • Third-party security audits
  • Compliance reviews
  • Risk assessments

Security Best Practices

Incident Response

Our dedicated security team monitors systems 24/7 and follows documented incident response procedures to quickly address any security events.

Employee Security

All employees undergo background checks and regular security training to ensure they understand and follow our security policies.

Data Management

We maintain strict data handling procedures and regularly review our data retention and destruction policies.

Contact Security Team

For security-related inquiries or to report a security concern:

Email: security@leadgpt.com

For responsible disclosure of security vulnerabilities, please encrypt your communications.