Lusha Sets Privacy Benchmark with ISO 31700 Certification

Lusha has achieved a groundbreaking milestone by becoming the first sales intelligence platform on the market to earn ISO 31700 certification.

This achievement underscores Lusha’s trustworthiness, assuring its customer-base that their data is handled with the utmost care.

ISO 31700 (Privacy by Design for Goods and Services) defines rules and accountabilities for organisations around how customers’ personal information is processed and addressed throughout the product lifecycle.

Privacy by design (PbD) involves embedding privacy controls and measures at the earliest stages of development, ensuring comprehensive data protection and risk mitigation from the ground up. This approach is increasingly important as more data vendors offer their services but utilize their customers’ confidential and personal data for sale purposes.

As data privacy concerns continue to rise among our customers, Lusha’s achievement stands as a testament to the importance and feasibility of prioritizing privacy in today’s digital landscape. The ISO 31700 certification was awarded by an independent third-party auditor and highlights our dedication to leading by example and setting a high standard for data protection.

A key aspect of Lusha’s privacy strategy is our approach to data collection and segregation of customer data.

Data collection

Lusha’s data collection starts with privacy by design protocols and legal approvals and continues with collection of the bare minimum data it requires to provide the services. Further, we provide visibility and transparency about our data practices, clearly informing customers about what data is collected, how it is used, and with whom it is shared. This includes providing easily accessible privacy policies and responding promptly to user inquiries about their data.

Lastly, Lusha enforces the shortest data retention period possible and disposes of it securely once it is no longer needed.

Data segregation

Lusha’s paying customer data is stored on a separate Amazon Web Services (AWS) environment in the EEA, providing an additional layer of security and segmentation while adhering to our strict policy against sharing and selling customer data. Lusha’s contact data is stored on AWS in the United States.

In addition, roles, responsibilities, and review approvals are proactively integrated into Lusha’s software and security development lifecycle. This helps ensure that privacy is at the forefront of developers’ minds as they execute each lifecycle phase. Lusha also implements robust security controls, including access controls, encryption, and secure storage, to protect personal data against unauthorised access, use, and disclosure.

Furthermore, Lusha ensures that all third-parties involved in handling personal data are vetted and bound by stringent agreements that mandate compliance with its privacy standards.

At Lusha, we believe that trust and transparency are fundamental to innovation. Achieving an accredited ISO 31700 certification further demonstrates Lusha’s proactive stance on privacy and reinforces our promise to our customers that their data is handled with the utmost care and integrity.