SysTrack Security

Lakeside is committed to maintaining rigorous processes and procedures in order to provide its customers and partners with the highest level of confidence in the security and integrity of our services. Lakeside maintains a comprehensive set of independent certifications and undergoes extensive third-party assessments to demonstrate this commitment.

Cloud Compliance Framework

Lakeside employs multiple cyber security compliance tools to validate ISO27001:2013, SOC 2, and CIS controls within SysTrack Cloud Edition. These assessments are conducted quarterly to ensure continued alignment. Lakeside proactively reviews and mitigates compliance issues as they arise. Lakeside maintains a suite of Information Security policies which are reviewed at least annually or upon significant change.

ISO 27001:2013
Lakeside Software originally achieved ISO 27001:2013 certification in November 2022 and continues to maintain it.

SOC 2 Type 2
Lakeside Software’s SysTrack Cloud Edition originally achieved Service Organizations Control (SOC) 2 certification in December 2022 and continues to maintain it.

Privacy

Lakeside is committed to protecting and preserving our customers’ privacy rights and we endeavor to provide transparency into our data protection practices. Our current Privacy Statement can be found here: https://www.lakesidesoftware.com/privacy-statement/ and information about our use of subprocessors can be found here: https://www.lakesidesoftware.com/subcontractors/
 

Cloud Security

With experience across nearly every industry, we ensure robust protection, compliance and end-to-end visibility.

Access Control

See more →

Access Control

Access to systems, source code, data, and configurations is restricted to only those who need it, following the principle of least privilege. Changes are governed by a formal, auditable process requiring director-level approval to ensure integrity and security.

Authentication

See more →

authentication

All customers authentication to the SysTrack Cloud UI uses Microsoft Azure B2C OpenID-Connect or SAML SSO through their identity provider. Role-based access controls provide granular management, allowing customers to enforce MFA, password policies and control SysTrack access.

Encryption

See more →

Encryption

Lakeside adheres to the NIST cybersecurity framework and implements latest encryption standards to safeguard data integrity and confidentiality. This reduces the risk of “eavesdropping”, tampering and message forgery. All communication and storage are encrypted both in transit and at rest.

Intrusion protection & prevention

See more →

Intrusion Protection & Prevention

Lakeside uses a defense-in-depth strategy with multiple intrusion detection and prevention systems to enhance security. This layered approach detects and mitigates threats early, safeguarding critical infrastructure and data.

Penetration testing & Vulnerability management

See more →

Penetration testing & Vulnerability management

SysTrack Cloud systems, API and the local SysTrack software agent are subjected to annual third-party penetration testing to identify and address potential vulnerabilities. This independent assessment ensures that security measures are robust and meet industry standards.