Security Stance

Safeguards to Protect You and Your Customers

Certification: SOC2, CCPA, HIPPA, and PCI DSS certifications provide the reassurance you need that security best practices are in place.

Role & Attribute-Based Access: Role-based access controls restrict access to authorized users – so your data stays secure. For increased control, role and attribute-based permissions let you grant different permissions to people in the same roles.

Version Management: With Amazon CloudTrail, we log, monitor and retain account activity related to actions across our Amazon Web Services infrastructure. You can see what changes have occurred and who deployed them, while rollback capability lets you revert to previous versions.

Project-Based Permissions: Leverage project-based permissions to give different teams access to different information – even when working on the same project.

Encryption: We apply encryption to all data, including data from third-party sources, providing an added layer of security to all data whether it’s in transit or at rest.

Secure Integration: Your integration credentials are encrypted in transit and at rest.

Data Structure: Liberate is unlike typical multi-tenant architecture because we never commingle your data with that of other customers.

Uptime: You can count on your Liberate platform to be there when you need it. Our platform performs with a near-perfect uptime.

Frequently Asked Questions

Does Liberate keep my data secure?
‍Yes, Liberate follows data security best practices to keep your information safe, including data backup and encryption. Our strong security stance has been independently verified by our SOC2 certification.


‍Will my data be commingled with the data of other clients?
‍No. We understand that many insurers feel uncomfortable with the thought of their data being grouped together with data from other customers, and we’ve structured the Liberate platform to avoid this. Every organization receives a unique instance. 
‍

‍Does Liberate perform regular testing?
‍Yes. Security is an ongoing commitment. Liberate conducts regulator penetration tests to identify vulnerabilities and weaknesses so they can be fixed before an attack occurs.


‍Does Liberate support single sign-on (SSO)?
‍Yes, Liberate supports single sign-on so you can securely sign into all integrated systems with one set of credentials through the user portal.
‍

‍Will Liberate’s employees keep my information safe?
‍Liberate employees sign confidentiality agreements and adhere to strict policies designed with your security in mind. Training ensures that employees know how to maintain security, and the offboarding process ensures that former employees no longer have access.