LeakLocked helps organizations trace information leaks. Protecting customer content is core to our product and our SOC 2 Type II program.
Compliance
LeakLock Inc. is pursuing SOC 2 Type II certification covering Security, Confidentiality, and Availability. Reports are available to customers under NDA upon request.
Data security
Encryption
- In transit: TLS 1.2+ for all browser and API traffic.
- At rest: MongoDB Atlas encryption at rest (AES-256).
Access controls
- Unique user accounts with email-scoped data isolation.
- Optional TOTP multi-factor authentication.
- Scoped API keys for the Outlook add-in (separate from session tokens).
- Audit logging for authentication, sends, and investigation access.
Subprocessors
| Vendor | Purpose |
|---|---|
| MongoDB Atlas | Database hosting |
| Deno Deploy | Application hosting |
| Resend | Email delivery |
| OpenAI | Signature detection and leak OCR |
| Google / Microsoft | OAuth authentication |
| Adobe | PDF conversion |
Contact
Security questions? Contact us at security@leaklocked.com.