Snapshot 112448
Raw (normalized text)
Scripts and page chrome removed; this is what change detection compares.
Skip to navigationSkip to main content Lob Trust & Security Center At Lob, we recognize that secure and compliant mail operations are critical to your business. Whether you’re streamlining customer communications, automating transactional mail, or leveraging intelligent mail for data-driven campaigns, we are committed to protecting the confidentiality, integrity, and availability of your data. Please see our subprocessor pageOpens in new tab for information regarding Lob's third party sub-processors. security@lob.com Privacy PolicyOpens in new tab We align our information security program with industry best practices and regularly validate the effectiveness of our program and security controls through rigorous third-party security assessments and compliance audits. Industry-Leading Security & Compliance SOC 2 Type 2 Compliance – We complete an annual audit against all five Trust Services Criteria (security, availability, processing integrity, confidentiality, and privacy) to demonstrate our commitment to security and compliance. Privacy & Regulatory Alignment – Our security and data protection practices are designed to support compliance with applicable regulations, including HIPAA, GDPR, and CCPA/CPRA, helping customers meet their legal and contractual obligations. For organizations handling protected health information (PHI), we also offer dedicated HIPAA-compliant processes and facilities, provide a Business Associate Agreement (BAA), and undergo an annual HIPAA Privacy audit. Enterprise-Grade Infrastructure – Our platform is powered by AWS data centers in the U.S., which maintain industry-leading security, redundancy, and compliance certifications. Third-Party Penetration Testing – We engage independent security firms for annual penetration testing to assess and strengthen our security posture. Secure and Seamless Access – We support Single Sign-On (SSO) and SAML integration to enhance secure authentication for our platform. Trusted Partner Network – Our print and delivery partners must meet strict security and compliance requirements, helping to maintain strong data protections throughout the entire mailing lifecycle. Lob is redefining mail by making it as simple and scalable as email. With security embedded in every aspect of our intelligent mail platform, we empower our customers to confidently automate their print and mail workflows while meeting their compliance and operational requirements. See Lob's subprocessor pageOpens in new tab for more information regarding Lob's subprocessors. Compliance SOC 2 HIPAA Microsoft Supplier Security & Privacy Assurance Program GDPR CCPA Resources View all Compliance Reports 2025 Type 2 SOC2 + HIPAA 2025 Type 2 SOC 3 Security Assessments 2025 Penetration Test Summary 2026 Penetration Test Policies & Procedures Primary Information Security Policy [Table of Contents] Security Incident Response Procedure [Table of Contents] BCDR Plan Summary Lob TPRM Policy [Table of Contents] View 5 more Miscellaneous Certificate of Insurance Annual Backup, DR, and IR Test Summary - 2025 Lob Data Flow Diagram Lob Network Diagram Other resources SOC 2 Type 2 + HIPAA Bridge Letter Controls View all Infrastructure Security Encryption key access restricted Production environment access restricted Unique account authentication enforced View 8 more Infrastructure Security controls Organizational Security Asset disposal procedures utilized Security awareness training implemented Pre-hire background checks performed View 1 more Organizational Security control Internal Security Procedures Backup processes established Continuity and disaster recovery plans tested Incident response policies established View 4 more Internal Security Procedures controls Product Security Data encrypted at-rest Vulnerability management procedures established Data encrypted in-transit at TLS 1.2 or higher Data Security and Privacy Privacy policy established Data classification policy established Data deletion requests handled View 1 more Data Security and Privacy control FAQ Updates View all Compliance 2025 Audit Reports Available Published December 2, 2025 Lob has completed its annual SOC 2 Type 2 and HIPAA audit for the 2024-2025 period, and the final report has been published here in the Trust Center for customer access. Compliance Audit Status Update Published October 28, 2025 Lob has completed its annual SOC 2 Type 2 and HIPAA audit for the 2024-2025 period. The final report is currently in progress with our independent auditors and is expected to be delivered before the end of the year. Once received, the updated report will be published here in the Trust Center for customer access.