Features How It Works Solutions For Customers Pricing About Contact Talk to Founders Join the Pilot

Security is at the core of everything we do. We implement industry-leading security measures to protect your data and ensure your business operations remain safe and compliant.

GDPR
Designed for Compliance
HIPAA
BAA Available (Enterprise)
AES-256
Data Encryption
AWS
Enterprise Infrastructure

Secure by Design: Our Commitment

As a company founded by software architects, security is at the core of our platform, not an afterthought. We are building LineUp on a foundation of industry-best practices from day one.

While formal certifications like SOC 2 and ISO 27001 are part of our future roadmap, here is our security commitment to you today:

Data Encryption

All your data is encrypted in transit (TLS 1.3) and at rest (AES-256).

Secure Infrastructure

Built on AWS, leveraging their enterprise-grade physical and network security.

Secure Development

Our team follows secure coding practices, including code reviews and vulnerability scanning, as part of our development lifecycle.

Continuous Monitoring

24/7 system monitoring, audit logging, and real-time alerting for security incidents.

Data Encryption

In Transit: All data transmitted between your devices and our servers is encrypted using TLS 1.3 with 256-bit encryption.

At Rest: All stored data is encrypted using AES-256 encryption, the same standard used by banks and governments.

End-to-End: Sensitive customer data is encrypted end-to-end, ensuring only authorized parties can access it.

Infrastructure Security

Cloud Provider: Hosted on AWS, leveraging their enterprise-grade physical and network security infrastructure.

Data Centers: Multiple redundant data centers with physical security, biometric access, and 24/7 monitoring.

Network Security: Firewalls, DDoS protection, and intrusion detection systems protect our infrastructure.

Access Control

Authentication: Multi-factor authentication (MFA) available for all accounts.

Authorization: Role-based access control (RBAC) ensures users only access what they need.

Session Management: Automatic session timeouts and secure session handling.

SSO Support: Enterprise SSO with SAML 2.0 for seamless integration.

Monitoring & Logging

24/7 Monitoring: Continuous monitoring of all systems and applications for security threats.

Audit Logs: Comprehensive logging of all user activities and system events.

Alerting: Real-time alerts for suspicious activities and security incidents.

SIEM Integration: Security information and event management for threat detection.

Application Security

Secure Development: Security built into every stage of our development lifecycle.

Code Review: All code undergoes security review before deployment.

Vulnerability Scanning: Regular automated and manual security testing.

Penetration Testing: Regular penetration testing and security audits.

Data Protection

Backups: Automated daily backups with point-in-time recovery.

Redundancy: Data replicated across multiple availability zones.

Retention: Configurable data retention policies to meet your compliance needs.

Deletion: Secure data deletion with verification upon request.

Incident Response

Response Team: Dedicated security team available 24/7 for incident response.

Protocols: Documented incident response procedures and runbooks.

Communication: Prompt notification of any security incidents affecting your data.

Recovery: Disaster recovery plans tested quarterly.

Compliance & Privacy

GDPR: Designed for compliance with European data protection regulations.

HIPAA: Business Associate Agreements (BAA) available for healthcare customers on Enterprise plans.

Data Residency: Control where your data is stored to meet local compliance requirements.

Certification Roadmap: SOC 2 and ISO 27001 certifications planned as we scale.

Our Security Practices

Secure by Design

Security is integrated into our platform from the ground up, not added as an afterthought.

  • Threat modeling for all new features
  • Security requirements in every sprint
  • Secure coding standards and guidelines

Team Training

Our entire team receives regular security training and awareness programs.

  • Quarterly security awareness training
  • Phishing simulations and testing
  • Secure development training for engineers

Continuous Improvement

We continuously assess and improve our security posture.

  • Regular security audits and assessments
  • Bug bounty program for responsible disclosure
  • Quarterly security reviews

Third-Party Security

We carefully vet all third-party vendors and partners.

  • Security questionnaires for all vendors
  • Regular vendor security assessments
  • Contractual security requirements

Transparency & Communication

We believe in being transparent about our security practices and incidents.

Status Page

Real-time system status and incident updates at status.lineup.com

Security Bulletins

Timely notifications of security updates and vulnerabilities

Security Documentation

Detailed security documentation available upon request for enterprise customers

Bug Bounty

Responsible disclosure program for security researchers

Security Contact

If you discover a security vulnerability or have security questions, please contact us:

Security Team: [email protected]

PGP Key: Download Public Key

Bug Bounty: Report a Vulnerability

Please do not disclose security issues publicly until we have had a chance to address them.

Secure Your Queue Management Today

Be among the first to experience LineUp's secure, intelligent queue management