Doubling Down on Privacy & Security
At Lacuna, we’re committed to providing innovative technology that harnesses open-sourced mobility data in new ways to help transportation agencies, private enterprises, and other ecosystem players achieve complex policy goals as well as operational efficiency and scale. To effectively deliver solutions with generational impact, our products need to be both innovative and secure.
Building off our recent SOC 2 Type II certification, we’re excited to announce we’re now also ISO 27001 certified, the international standard on how to best manage information security.
Why it matters
Early-stage startups constantly make decisions about where employees should focus their time and energy. Time-intensive projects that don’t directly contribute to revenue-generating initiatives frequently fall by the wayside for companies of Lacuna’s size. We’re different. Making meaningful and lasting change in governing the public right-of-way is often a months- or years-long process. Achieving and maintaining certifications like this strengthens the resiliency of our customer experience, providing the confidence agencies need to go forward with adopting a transportation operating system like City Conductor. In other words: when customers are ready, we’re ready.
ISO 27001 certification, specifically, requires us to document and follow a comprehensive framework for security, focused on risk mitigation, staff training, measurement and monitoring, and continuous improvement. It’s a rigorous, extensive process conducted by independent third-party auditors, jointly developed by the International Organization for Standardization (ISO) and the International Electrotechnical Commission (IEC).
Certifications that carry as much weight as ISO 27001 and SOC 2 Type II take time. As the first multimodal transportation technology company to receive both, we’ve spent nearly two years collectively undergoing the requirements and processes, engaging every level and function of our team to do so. To have achieved both in the span of a few months is a testament to our commitment to data security.
The Impact
It’s no secret that mobility data is extremely sensitive. It can encompass accounting for trip origins and destinations, deciphering revenue- vs. non-revenue-generating vehicles, and more. Public transportation officials rely on Lacuna to gain an independent, validated understanding of that information to make informed policy decisions for the public good regarding equity, public safety and sustainability. It's critical to us, and our customers, this information is communicated in a series of highly secure electronic notifications anonymized to safeguard privacy and security. It’s not an easy balance to strike; the data must be granular enough to provide real value, but also aggregated enough to protect the privacy of every individual trip-taker.
Privacy has been embedded in our operations since day one. Our leadership deliberately and strategically includes established and noted privacy experts who ensure our technology is built to prioritize individual privacy. This has been critical to our collaboration with the Open Mobility Foundation (OMF) to build privacy principles, effectively addressing privacy across the globe. As our vehicles, our shared physical spaces, our transportation ecosystem, and our world become more and more interconnected, it’s critical we have the right digital tools to usher in the future of mobility.
Contact us if you’d like to learn more about our bottom-up, top-down privacy-first architecture.
