Our path to SOC 2 Type I certification — with transparency at every stage.
Our target milestones toward SOC 2 Type I certification.
While we complete our certification journey, here's what you can review today.
Can I get a copy of your SOC 2 report?
Our SOC 2 Type I report will be available to customers and prospects under NDA once the audit is complete (target Q3 2026). Contact sales@lostchurn.com to be notified when it's ready.
What Trust Services Criteria are you targeting?
We are targeting Security (CC) and Availability (A1) as our primary criteria, with Confidentiality (C1) as an additional criterion.
Do you have a security questionnaire I can review?
Yes. We can complete your security questionnaire or provide our standard security documentation package. Contact security@lostchurn.com.
Does LostChurn store credit card numbers?
No. LostChurn never stores raw card numbers, CVVs, or sensitive cardholder data. We only store tokenized references from your payment processor. PCI DSS compliance is handled entirely by Stripe, Braintree, and your PSP.
Where is my data stored?
Data is stored in SpacetimeDB instances. US merchants use our primary instance; EU merchants can opt into our EU-hosted instance (AWS Frankfurt) for GDPR data residency.
Our team is happy to walk through our security posture, share documentation, or complete your vendor questionnaire.
