Security / trust page — Lokalise

Cited by

Facts read from this source

• SOC 2 type2 Report an error

  “Lokalise holds SOC 2 Type II, ISO 27001, and ISO 27017 certifications”

• ISO 27001 iso27017 Report an error

  “Lokalise holds ISO/IEC 27001 certification for information security management and ISO/IEC 27017 certification for cloud service providers, both since November 2020.”

• EU aws Report an error

  “processes customer data on EU-based AWS infrastructure”

• SOC 2 annual audit Report an error

  “security controls and practices are continuously validated through annual SOC 2 Type II audit”

• HIPAA alignment Report an error

  “Lokalise aligns its security and risk management program with HIPAA requirements through its SOC 2 Type II certification. Customers who qualify as a Covered Entity or Business Associate under HIPAA may use the platform.”

• Pci dss Report an error

  “Lokalise is not PCI DSS certified. Lokalise processes payments through Stripe, a PCI DSS-certified payment processor. Lokalise does not store credit card numbers or payment information in its systems.”

• SSO SAML Report an error

  “Lokalise supports SAML-based single sign-on for enterprise teams. SSO allows to manage user authentication centrally, so access to Lokalise is governed by the enterprise's existing IdP.”

• SSO idps Report an error

  “Supported identity providers include Google, Microsoft Azure AD, Okta, OneLogin, Keycloak, PingFederate, and PingIdentity (all via SAML). SSO/SAML is available on the Enterprise plan.”

• Rbac Report an error

  “Lokalise uses a role-based security architecture. User roles and permissions are configured at the team and project level”

• Two factor auth Report an error

  “Users can activate two-factor authentication on individual accounts. Password policies and secure password enforcement are configurable by administrators.”

• Audit logs Report an error

  “Lokalise maintains a detailed application audit log of all activities performed in the system. Logs are available through the application interface and exportable to CSV. Audit log data is retained for 12 months.”

• API token auth Report an error

  “API access requires token authentication and uses the same RBAC model as the web interface. Tokens are scoped to permissions and can be revoked at any time.”

Scores citing this record

• The App Developer European sovereignty
• The Data Protection Officer European sovereignty
• The In-House Document Translator European sovereignty
• The E-Commerce Marketer European sovereignty
• The Localization Manager Confidentiality of translated content
• The Localization Manager European sovereignty
• The Skeptic Confidentiality of translated content
• The Skeptic European sovereignty
• The Skeptic Pricing transparency