GoTo employees and temporary workers are informed on a continuous basis, as determined by the company, about security and privacy guidelines, procedures, policies and standards through various mediums of communication such as awareness campaigns, new hire on-boarding kits, webinars with the CISO, annual policy compliance, security training targeting specific roles (such as software developers), security champion programs, as well as visual media campaigns. Additionally, they are hosted on our internal site. They are also communicated to all Global Employees on a regular basis.

Security Policies are relayed to employees at the time of hire and available in the Employee Handbook. In order to ensure the confidentiality, integrity, and availability of GoTo Information and IT systems we do not send customers these documents. It is aligned to ISO27001:2013.Īt least annually, applicable policies are reviewed by management to ensure that any procedures or standards are updated in accordance with contractual and legal commitments and company requirements/standards. Information security policies and processesĪn Information Security Policy has been established at GoTo and assist in defining the role of technology and management at our organization. This cached version is designed to allow the user offline access to their data and vault when no internet connection is available. If enabled, a secure, encrypted, local copy of a user’s vault is stored automatically when a user connects to LastPass via a browser extension or mobile application. Additionally, Long-Term Retention (LTR) backup will keep the first backup of a week for four weeks and the first backup of each month for three months as an additional safety feature. To ensure the safety of your data the LastPass SSO database leverages 7-day point-in-time restore (PITR) capability. In addition, a corresponding back-up is made in a geographically distant datacenter every seven days and is retained for four weeks.

LastPass backs-up Customer Content within the same datacenter in 24-hour and seven-day intervals. Each datacenter is capable of handling all user traffic.Īll user data is stored in a redundant manner with automatic disaster recovery and failover using multiple datacenters. LastPass Password Manager and LastPass SSO functionalities are separated in distinct data centers. LastPass operates, based on data residency preference in: fully redundant, active-passive datacenters in the United States or Europe or world-class cloud hosting provider data centers in Australia or Singapore.

Lastpass mfa