Lanced

Trust Center

Security

The security measures and organisational practices we use to protect the Lanced platform and the data people trust us with. We publish only what we actually do — we hold no security certifications and make no claims to any.

EU hosting

Production runs on managed cloud infrastructure in Amsterdam, the Netherlands. The managed PostgreSQL database holds every record; object storage holds every file and is pinned to EU jurisdiction by default.

No self-operated hardware

We do not operate our own physical servers or data centres. Infrastructure security is delegated to providers under data processing agreements — see the Sub-Processor Register.

Restricted database role

The API connects to the database as a restricted role without superuser rights and refuses to start unless that is the case. A separate maintenance role is reserved for scheduled jobs.

For the complete picture, read our Security, Privacy & Data Handling Statement. Found a potential vulnerability? Email privacy@lancedhq.com with the details and we'll get back to you.