SOC 2 Type II Certified

Enterprise-Grade security to protect your data

At Lev, protecting your data is our highest priority. Our platform is built with multi-layered security and strict privacy controls to safeguard your sensitive information.

Talk to our team

SOC 2 Type II

Certified

CCPA

Compliant

AWS

Infrastructure

Penetration Tests

Quarterly

Certified & Verified By

SOC2

Microsoft Verified

Google Verified

AWS Partner

Security Framework

A Comprehensive Approach to Security

We've built a robust security framework to protect your data at every level.

Enterprise-Grade Security

Lev's platform is built with security as a foundational principle. Our comprehensive approach ensures your sensitive commercial real estate data is protected at every level, from infrastructure to application security.

Secure Data Centers

Hosted at Amazon Web Service (AWS). Data centers provide physical security 24/7, state-of-the-art fire suppression, redundant utilities, and biometric devices.

Network Security

All network traffic runs over SSL/HTTPS. Our infrastructure is under vigilant surveillance of Cloud scanners like CloudSploit and Prowler.

System Security

We maintain system consistency using configuration management, up-to-date images, and continuous deployment. Web applications are constantly monitored and scanned.

Application Security

We prevent single points of failure. Even if there is an interruption to one system, the rest of our services stay up and secure with physically separated database instances.

Limited Access Permissions

We request only the minimum permissions needed to enable the functionality you want, with strict access controls and usage limitations.

Intelligent Email Filtering

Our systems automatically identify and process only emails relevant to commercial real estate deals, ignoring personal communications.

Private Relationships

Your contacts remain completely private and only visible to you. They aren't shared with Lev, other Lev clients, or anyone outside your organization.

Transparent Data Usage

We're clear about what data is collected, how it's used, and who can access it—with strict isolation between client environments.

Email Integration Security

Two key principles guide our email integration: No humans will ever have access to your email data, and only deal-related emails are ingested into the Lev platform.

Our Security Framework

Built on Trust and Transparency

At Lev, we believe privacy is a fundamental right. Our approach to data protection is built on four core principles that guide everything we do.

Data Ownership

You maintain ownership of your data at all times. We're just processors, and you remain in control of your information throughout your relationship with Lev.

Data Minimization

We only collect the data necessary to provide our services, and we automatically filter to exclude non-deal-related communications.

Purpose Limitation

Your data is only used for the specific purposes you've authorized—helping you streamline financing workflows and connect with the right capital sources.

Transparency

We're open about our data practices and aim to provide clear, understandable explanations of how your information is used.

Enterprise Security

Enhanced Security for Enterprise Organizations

Enterprise organizations have unique security requirements. We offer enhanced security features and dedicated support for our enterprise clients.

Enterprise-Ready Security

Lev understands the complex security requirements of large organizations. Our enterprise security features provide the controls, visibility, and customization needed to meet strict corporate standards and regulatory requirements.

Custom Security Controls

Tailored security configurations to meet specific enterprise requirements, including custom access policies, audit logging, and retention settings.

Advanced User Management

Enterprise-grade identity management with SAML/SSO integration, role-based access controls, and user provisioning.

Dedicated Security Team

A dedicated security team to support enterprise clients with custom security reviews, documentation, and regular check-ins.

Enhanced Data Residency

We request only the minimum permissions needed to enable the functionality you want, with strict access controls and usage limitations.

Secure Integrations

Secure Third-Party Integrations

Our third-party integrations are built with security as a core principle, ensuring that your data remains protected across all connected services.

Secure Third-Party Connections

All integrations undergo rigorous security reviews, with strict data access limitations and transmission protocols.

API Security

Our APIs use industry-standard authentication and authorization, with rate limiting and monitoring to prevent abuse.

OAuth 2.0 & Scoped Access

We implement OAuth 2.0 protocols with scoped access tokens to limit permissions for integrated services.

Regular Monitoring

Continuous monitoring of all integrated services with automated alerts for unusual activity patterns.

Integration Security Program

Learn more about our comprehensive integration security program, including our vetting process, ongoing monitoring, and security requirements for third-party services.

Request Security Documentation

Certifications & Compliance

Verified and Certified Security

We maintain rigorous compliance with industry standards and regulations, with regular independent verification of our security controls.

SOC 2 Type II

SOC 2 compliance strengthens our security through rigorous controls encompassing access, data encryption, and contingency plans for business continuity, disaster recovery, and incident response. We undergo examinations of our security controls annually with a third-party audit firm.

Penetration Testing

We perform quarterly penetration tests to detect vulnerabilities in our network, applications, and infrastructure. These independent assessments help us identify and address potential security issues before they can be exploited.

CCPA Compliance

Lev is committed to ensuring compliance with the California Consumer Privacy Act (CCPA), which provides consumer privacy rights and protections for residents of California. We respect your right to access, delete, and control your personal information.

Need more detailed information about our security program for your vendor assessment process?

Request Security Documentation

Products

Solutions

Resources

Join Lev Now