Why Certifications Matter to Us

As a startup, we’re acutely focused on what helps us grow and what helps us stay true to our mission of making our transportation systems more efficient, sustainable and equitable. To accomplish our goals, it’s critical we have the right foundation in place as we scale our technology.

To that end, I’m thrilled we earned the SOC 2 Type II certification. As an industry gold standard for security and privacy, this achievement memorializes Lacuna’s commitment to privacy-first principles. The certification demonstrates how we’ve successfully baked data protection and individual privacy into the core of our company. It also highlights our leadership in this space as the first multimodal digital policy company to receive SOC 2 Type II certification.

What is SOC 2 Type II? 

The process to become certified is a rigorous, extensive year-long process conducted by independent third-party auditors. They reviewed the effectiveness of our security policies and controls to protect both mobility providers’ and residents’ data. It included auditing Lacuna’s system in regards to privacy, security, confidentiality, availability, and processing integrity.

Why We Care

Public transportation officials rely on Lacuna to gain an independent, validated and granular understanding of what’s happening on the ground to make informed policy decisions for the public good as it relates to equity, public safety and sustainability. Further, our technology enables public leaders to then issue policy digitally by establishing and maintaining dynamic, privacy-protected communication between commercial transportation operators and public transportation agencies.

Because of this constant two-way flow of data, it’s critical to us (and our customers) this information is communicated in a series of highly secure electronic notifications anonymized to safeguard privacy and security.  

As much as privacy and data security are embedded into our technology, privacy experts are also a part of our team. Lacuna’s leadership includes established and noted privacy experts who ensure our technology is built to prioritize individual privacy. They have been critical to pioneering our interoperable “open-systems digital infrastructure,” capable of managing multiple transportation modes, ensuring everything we do, including our collaboration with the Open Mobility Foundation (OMF) to build privacy principles, effectively addresses privacy across the globe. And now, our SOC 2 Type II certification reinforces our bottom-up, top-down privacy-first architecture. Onward and upward!


Contact us if you’d like to learn more about how we address privacy and security.

Nancy Leung, Director of Information Security

At Lacuna, Nancy works to keep critical cloud-based systems and sensitive information secure. Her diverse experience enables her to build relationships and incorporate different perspectives when developing and implementing varying policies, processes and technologies to protect Lacuna and its customers. Nancy’s commitment to linking people with technology to deliver on firmwide goals makes her both highly effective and beloved by her co-workers.

Previous
Previous

Hot Wheels: Why Heatmaps Are A Policymaker’s Dream

Next
Next

Top 9 Questions to Change How You Think About Transportation Equity