Product and cloud security

We prioritize the safeguarding of your data. Explore how we go the extra mile to secure your information, providing you with a reliable and trustworthy platform for your business needs.

Free trial

Request a demo

Product security

Authentication

Lime Go supports local (username/password) authentication and access to certain functions can be set per user in Lime Go via the user’s profile settings.

Password

We do not store passwords at all, just an identifying hash that is undecipherable. The hash is used to check whether the password the user has entered is correct.

Role-based access

Granular access permissions can be set on user accounts and associated with a role from an admin panel. Access to certain functions can be set per user in Lime Go via the user’s profile settings.

Cloud security

Providers

Lime Go is primarily hosted with Amazon Web Services (AWS). AWS data centers have been certified as ISO 27001 compliant, among many other certifications. For more information, refer to AWS documentation.

Facilities

AWS data centers have several infrastructure controls including redundant power systems, fire suppression systems, and climate control. For more information, refer to AWS documentation.

On-site security

AWS data center security includes features such as intrusion detection systems, fences, and security guards. For more information, refer to AWS documentation.

Locations

Lime Go is hosted in AWS data centers located in Ireland, Europe. Learn more

Segmentation

Services are placed in different trust zones based on sensitivity. Allowed traffic between zones is kept to a minimum.

Logical access

Access to production environments is restricted to authorized personnel only on a strict need-to-use basis.

WAF

Incoming traffic is protected by a Web Application Firewall that protects against common threats such as SQL injection and cross-site scripting (XSS).

DDoS protection

Procedures for managing denial-of-service attacks are in place.

Data in transit

All communication between Lime Go client applications and backend APIs are encrypted with industry-standard HTTPS/TLS (version 1.2 or higher), as supported by clients.

Data at rest

All data at rest is encrypted using AES encryption with a 256-bit key size.

Monitoring

Our operations team monitors key service metrics and logs to predict, prevent, and act on disruptive events.

Service status

Lime provides a public status page where information about scheduled maintenance and disruptions is posted.

Backup

Backups are protected from ransomware attacks by being immutable – they cannot be modified or deleted after creation.

Business continuity

Lime has established a Business Continuity Plan that describes how the company will act during catastrophic events. The plan is tested regularly.

Application security

Secure development process

Our development process takes information security into account and mandates risk assessments and structured change control procedures to be followed.

Training

Our developers continuously undergo safety training when developing Lime Go. Safety critical codes are always reviewed by at least two developers.

Automated code analysis

Source code is automatically scanned for vulnerabilities and may not be deployed until issues are fixed.

Code reviews

All code is peer reviewed. Security critical code always receives extra attention.

Separate environments

Development and testing are always performed in isolated environments using non-production data.

Dependencies

Third-party libraries are vetted, managed, and continually scanned for vulnerabilities.

Organisation security

Device security

All company devices are managed and must have storage encryption, up-to-date anti-malware software, and an enabled firewall to be compliant.

Policies

All employees are trained in how to follow relevant information security policies and procedures.

Security incidence response

Relevant teams are trained on security incident response procedures, including communication channels and escalation paths. In case of a major incident, responders are backed by the Major Incident Response Team.

Supplier management

Lime maintains an inventory of all suppliers involved in service delivery. Critical suppliers go through regular security reviews.

Security awareness

All new employees attend a comprehensive introduction to information security that covers basic security principles, current threats, how to work securely with customer data, physical security, and other relevant topics.

Recruitment

As part of our rigorous recruitment process, several background checks are performed.

Legal agreements

All Lime employees have non-disclosure and confidentiality clauses in their employment contracts.

Operational status

Read more about Lime Go’s current operational status here.

Lime Go status

We aim to make Lime Go as reliable and accessible as possible for you as a user.

Application

API

What are you waiting for?

There’s no time to waste! Let’s find the solution that will help you get more customers and turn existing ones into loyal ambassadors today.

Free trial

Request a demo