Security that’s built in, not bolted on.
LeaseSuite meets and exceeds global standards including ISO 27001 — giving you total peace of mind.
CERTIFICATION
LeaseSuite is ISO 27001 certified
- This internationally recognised certification reflects our deep commitment to safeguarding customer data and maintaining the highest standards of information security.
- ISO 27001 provides a rigorous framework for identifying and managing information security risks across our platform and processes. For our customers, it means knowing their data is protected by best-practice systems, policies, and controls — purpose-built for trust, compliance, and resilience.
- We’re proud of this milestone and remain focused on continuously raising the bar in security, reliability, and innovation.
More about LeaseSuite's commitment to security
PEOPLE PRACTICES
At LeaseSuite, security is a core priority shared across the entire team. Every employee understands their role in supporting the effective operation of our Information Security Management System (ISMS) and commits to adhering to clearly defined security policies outlined in their employment agreements.
SECURITY AWARENESS
Security awareness training is provided on a consistent schedule, with in-depth, specialised sessions focused on secure software development practices and enforcement tools tailored for the Product team.
In addition, the LeaseSuite ISMS includes a robust suite of people-focused policies covering onboarding, offboarding, and the appropriate use of all LeaseSuite-managed devices.
OPERATIONAL PROCEDURES
The LeaseSuite ISMS comprises a wide variety of documented policies and related operational procedures aligned to the ISO 27001 standard controls. This is inclusive of the following sample of key policies and procedures:
- Risk Management Framework
- Business Continuity & Disaster Recovery
- Incident Management Policy
- Change Management Policy
- Asset Management Policy
- Access Controls Policy
- Cryptographic Controls Policy
- LeaseSuite Privacy Policy
- Cloud Audit Security Program
TECHNICAL CONTROLS
Our compliance with ISO 27001 demands that we continuously invest in a set of layered and integrated technical security controls spanning from LeaseSuite employee devices into the AWS cloud.
CLOUD BASED
LeaseSuite is a cloud-based SaaS platform hosted on AWS, making use of a broad range of trusted security services within the AWS ecosystem. We maintain a continuous approach to testing our security controls and countermeasures.
Additionally, LeaseSuite engages a well-regarded third-party penetration testing firm to regularly assess both our cloud infrastructure and application, providing detailed reports as part of our ongoing security assurance process.
Frequently asked questions.
FAQs
Still have questions? Here’s everything you need to know about LeaseSuite security.
Where is the data held and located?
Everything is safely stored and secured in Amazon AWS, located in Sydney. With future scale, we will turn on extra data centres when we need too, to support locality.
Is my data safe and secure?
LeaseSuite uses advanced encryption protocols, multi-factor authentication, and regular security audits to ensure strict data protection, guaranteeing that our clients’ information remains secure, confidential, and protected from unauthorised access.
We have our own IT and cyber security audit, can we follow our own process when assessing LeaseSuite?
We are happy to answer any security questionnaire for your IT team and/or can supply any security and data explainer documentation on request. Please note we are also ISO 27001 compliant, which will cross out almost half of your policies questions.
Do you support Single Sign On?
Yes. We integrate with the most common, Microsoft Azure etc. If there is anything you have, that we currently don’t support, we can chat and connect.
Do you share my data with other customers?
Absolutely not! Your data is your data and nobody else’s. Locked down in your instance. If data is shared, it is aggregated and anonymised when sharing market trends with everyone. Nothing client or deal specific. Our MSA and T&C’s cover this in more detail.
“Security isn’t just a feature — it’s our foundation.”
ANDREW BROWN
– CTO & CO-FOUNDER