In place today
- HTTPS everywhere (TLS 1.2 or newer). The desktop agent only talks to the TeamLens API over HTTPS.
- Passwords stored only as bcrypt hashes.
- Optional two-factor sign-in, plus Google sign-in.
- Role-based access: employees see their own data, managers their teams, admins set policy.
- Hosted on a dedicated server in Finland (EU). Databases are not reachable from the internet.
- Nightly database backups.
- Sign-ins, admin actions and notice acknowledgements are logged.
- Card payments are handled by our payment provider. Card numbers never touch TeamLens servers.
Not there yet: full encryption at rest, single sign-on (SSO), an independent penetration test, and SOC 2 / ISO 27001 certification. We'll update this page when that changes.
Found a vulnerability? Email info@teamlens.ai.