--- title: "Security & Compliance — SOC 1 & SOC 2 Type II Certified | LōD" description: "LōD upholds the highest security standards with SOC 1 Type II and SOC 2 Type II compliance. Defence-in-depth, least privilege access, AES-256 encryption, and annual penetration testing." lang: en json-ld: | [ { "@context": "https://schema.org", "@type": "Organization", "name": "LōD Technologies", "alternateName": "LōD", "url": "https://lod.io", "logo": "https://media.base44.com/images/public/69eb97e3a261d40e27688f9d/6cf86e0a9_Lod-Green-no-Background.png", "description": "LōD is the energy intelligence platform for AI data centers and Bitcoin mining operations, providing real-time grid signals, automated curtailment, and device-level execution.", "sameAs": [ "https://www.linkedin.com/company/lodenergy/", "https://x.com/Lod_io" ], "contactPoint": { "@type": "ContactPoint", "contactType": "sales", "url": "https://lod.io/contact" } }, { "@context": "https://schema.org", "@type": "SoftwareApplication", "name": "LōD Platform", "applicationCategory": "BusinessApplication", "operatingSystem": "Web", "description": "Energy intelligence platform for data centers with real-time ERCOT grid monitoring, automated curtailment, demand response participation, and IoT device control.", "offers": { "@type": "Offer", "price": "0", "priceCurrency": "USD", "description": "Free trial available" }, "provider": { "@type": "Organization", "name": "LōD Technologies" }, "featureList": [ "Real-time ERCOT grid intelligence", "Automated curtailment", "Demand response participation", "IoT device control", "Bitcoin mining management", "AI data center energy optimization", "SOC 1 Type II and SOC 2 Type II compliance" ] }, { "name": "LōD", "@context": "https://schema.org", "@type": "WebSite", "url": "https://lod.io" }, { "name": "LōD", "logo": "https://media.base44.com/images/public/69eb97e3a261d40e27688f9d/9da9a1ff0_logo.png", "@context": "https://schema.org", "@type": "Organization", "url": "https://lod.io" }, { "@context": "https://schema.org", "@type": "BreadcrumbList", "itemListElement": [ { "@type": "ListItem", "position": 1, "name": "Home", "item": "https://l-d-s-website.base44.app/" }, { "@type": "ListItem", "position": 2, "name": "Security & Compliance — SOC 1 & SOC 2 Type II Certified", "item": "https://l-d-s-website.base44.app/security" } ] }, { "@context": "https://schema.org", "@type": "FAQPage", "mainEntity": [ { "name": "What is LoD Technologies?", "@type": "Question", "acceptedAnswer": { "@type": "Answer", "text": "LoD Technologies helps you organize, track, and share your work in 1 unified workspace. Built for teams and solo users who want clarity and speed." } } ] } ] --- [![LōD logo](https://media.base44.com/images/public/69eb97e3a261d40e27688f9d/6cf86e0a9_Lod-Green-no-Background.png)](/) Products Industries Platform [For AI Agents](/for-agents) Resources [Book a Strategy Call](/contact) [Login / Register](https://app.lod.io/) Governance & Security # GOVERNANCE AND SECURITY At LoD we are committed to upholding the highest security standards, reflected in our SOC 1 Type II and SOC 2 Type II compliance across all five trust service criteria: Security, Availability, Processing Integrity, Confidentiality, and Privacy. ## GOVERNANCE PRINCIPLES ### Defence-In-Depth We implement layered security controls to ensure multiple layers of our infrastructure are always protected. ### Least Privilege Access Access is strictly limited to those with a legitimate business need and is based on the principle of least privilege. ### Continuous Improvement Our controls are regularly updated to enhance effectiveness, auditability, and reduce operational friction. ## DATA PROTECTION ### Data At Rest All personally identifiable data stored in our systems is encrypted using industry-standard methods, including AES-256 encryption for sensitive data. ### Data In Transit We use TLS 1.2 or higher to safeguard data transmitted over networks, with additional layers such as HSTS to maximise protection. ## PRODUCT SECURITY Vulnerability Scanning LoD conducts vulnerability scanning at key stages of our Secure Development Lifecycle (SDLC). This includes: - Software Composition Analysis (SCA) to ensure third-party components in our software are free from known vulnerabilities. - Dynamic Application Security Testing (DAST) to evaluate the behavior of running applications. - Network Vulnerability Scanning to detect vulnerabilities in our network systems regularly. Penetration Testing At LoD, we engage with industry leading security firms to perform penetration testing at least annually. These assessments cover our entire environment, from cloud environments to product interfaces, ensuring all vulnerabilities are identified and mitigated promptly. We ensure that full system access, including source code, is provided to our testers to maximise coverage. Detailed penetration test reports are available for review by our clients upon request. ## DATA PROTECTION ### Endpoint Protection All corporate devices at LōD are centrally managed and secured through Mobile Device Management (MDM) software. We enforce disk encryption, anti-malware protection, and regular software updates on all devices. Alerts from our endpoint protection systems are monitored 24/7 to ensure any anomalies are addressed immediately. ### Vendor Security LōD follows a risk-based approach to vendor management. Vendors are evaluated based on their access to our customer and corporate data, the potential risk they pose to our infrastructure, and their overall security posture. Each vendor undergoes continuous monitoring and periodic reviews to ensure compliance with our security standards. ### Secure Remote Access LōD ensures secure remote access through the use of Virtual Private Networks (VPNs) and encrypted connections. All access to our systems from external networks is tightly controlled and logged, with multi-factor authentication (MFA) enforced on critical systems. Malware-blocking DNS servers are also used to protect our employees while browsing the internet. ### Security Training LōD provides comprehensive security training to all employees upon onboarding and annually. Employees are educated on secure coding practices, identifying social engineering attacks, and the correct handling of sensitive data. We also conduct regular simulations and provide threat briefings to keep our team updated on emerging security threats. SOC 1 Type II SOC 2 Type II GDPR Compliant ISO 27001 Related Reading [Company ### LōD Achieves SOC 1 Type II Certification Across Its Full Product Suite Read ](/blog/soc-1-certification) INTERESTED? ## QUESTIONS ABOUT SECURITY? [Contact Security Team](/contact) ![LōD](https://media.base44.com/images/public/69eb97e3a261d40e27688f9d/6cf86e0a9_Lod-Green-no-Background.png) Subscribe to the Energy Pulse Newsletter I agree to receive marketing communications from LōD, subject to our [Privacy Policy](/privacy). \* Subscribe ## Company - [About Us](/about) - [Team](/team) - [Careers](/careers) - [Security](/security) - [Book a Strategy Call](/contact) ## Resources - [Blog](/blog) - [Docs](/docs) - [Docs (ES)](/es/docs) - [Privacy Policy](/privacy) - [Terms of Use](/terms-of-use) - [Case Studies](/case-studies) ## Social Media [](https://www.linkedin.com/company/lodenergy/)[](https://x.com/Lod_io) © 2026 LōD Technologies. All rights reserved. [Privacy Policy](/privacy)[Terms of Use](/terms-of-use) We use cookies to improve your experience and understand how our site is used. By continuing, you agree to our [Privacy Policy](/privacy). DeclineAccept