Enterprise-grade security underpins the Conversational Cloud
LivePerson’s Conversational Cloud offers unmatched enterprise-grade security. Our applications, infrastructure, and policies have been vetted by advanced security teams at our Fortune 500 customers and reflect 20+ years of industry leadership in data and systems security.
Compliance and security certifications
We meet the most relevant international security and privacy standards.
SSAE 18 SOC2+HIPAA (formerly SAS70)
We conduct yearly data center audits and our reporting is compliant with the American Institute of Certified Public Accountants (AICPA).
ISO 27001
Our Information Security Management System is certified for ISO compliance.
Learn more
PCI DSS 3.2.1
We handle payment data and secure transactions in compliance with Payment Card Industry Data Security Standards 3.2.1.
GDPR
Our data and privacy policies are in full compliance with EU General Data Protection Regulation.
Learn more
SOX
Our finance and security operations are compliant with all Sarbanes-Oxley requirements.
HIPAA via Business Associate Agreement (BAA)
LivePerson executes BAAs with HIPAA-covered entities to certify PHI protections.
HITRUST CSF® v9.3
LivePerson is HITRUST CSF® v9.3 certified to ensure robust security protection for our customers, including HIPAA-covered entities.
Data security
We use the most current in-transit and at-rest encryption, along with optional AES and sensitive data masking. Our application security and customer controlled policies offer full visibility and logs to users and make it easy to customize user permissions and access.
Product and application security
LivePerson adheres to a comprehensive Secure Software Development Life Cycle that includes the following:
Design and planning
Our security team is actively involved in design for all major projects.
Static code analysis
We conduct routine OWASP and automated scans in our systems.
Security scans and audits
We conduct regular vulnerability scanning and third-party assessments.
Training and awareness
We issue third-party training in secure coding and ethical hacking for our R&D and QA teams.