# Security at Lithic

Security is fundamental to how Lithic builds and operates its platform. We design every system with protection, resiliency, and transparency at the forefront. Our security program aligns with SOC 1, SOC 2, ISO 27001, and PCI DSS, ensuring rigorous controls, continuous monitoring, and independent audits across all critical functions. We maintain strict access governance, thorough risk assessments, and a unified control framework to safeguard sensitive data. Protecting customer information isn’t just a requirement for Lithic, it is a core principle that guides every aspect of our operations.

[Security@Lithic.com](mailto:Security@Lithic.com)

## Resources

Bulk download

|     |
| --- |
| #### Lithic 2026 PCI DSS AOC Final Report.pdf<br>Copy link for Lithic 2026 PCI DSS AOC Final Report.pdf<br>Request access Lithic 2026 PCI DSS AOC Final Report.pdf |
| #### PCI Responsibility Matrix.pdf<br>Copy link for PCI Responsibility Matrix.pdf<br>Request access PCI Responsibility Matrix.pdf |
| #### POL318 Backup and Retention Policy.pdf<br>Copy link for POL318 Backup and Retention Policy.pdf<br>Request access POL318 Backup and Retention Policy.pdf |
| #### POL315 Human Resource Security Policy.pdf<br>Copy link for POL315 Human Resource Security Policy.pdf<br>Request access POL315 Human Resource Security Policy.pdf |
| #### POL308 Security and Privacy Awareness Policy.pdf<br>Copy link for POL308 Security and Privacy Awareness Policy.pdf<br>Request access POL308 Security and Privacy Awareness Policy.pdf |
| #### POL304 Mobile Device Security Policy.pdf<br>Copy link for POL304 Mobile Device Security Policy.pdf<br>Request access POL304 Mobile Device Security Policy.pdf |
| #### POL530 Logical Software Installation Policy.pdf<br>Copy link for POL530 Logical Software Installation Policy.pdf<br>Request access POL530 Logical Software Installation Policy.pdf |
| #### POL306 Vulnerability Management Policy.pdf<br>Copy link for POL306 Vulnerability Management Policy.pdf<br>Request access POL306 Vulnerability Management Policy.pdf |
| #### POL307 Logging and Monitoring Policy.pdf<br>Copy link for POL307 Logging and Monitoring Policy.pdf<br>Request access POL307 Logging and Monitoring Policy.pdf |
| #### POL515 Threat Management Policy.pdf<br>Copy link for POL515 Threat Management Policy.pdf<br>Request access POL515 Threat Management Policy.pdf |
| #### POL515 Data Leakage Prevention Policy.pdf<br>Copy link for POL515 Data Leakage Prevention Policy.pdf<br>Request access POL515 Data Leakage Prevention Policy.pdf |
| #### POL312 Network Protection Policy.pdf<br>Copy link for POL312 Network Protection Policy.pdf<br>Request access POL312 Network Protection Policy.pdf |
| #### POL316 Physical Security Policy.pdf<br>Copy link for POL316 Physical Security Policy.pdf<br>Request access POL316 Physical Security Policy.pdf |
| #### POL311 Risk Management Policy.pdf<br>Copy link for POL311 Risk Management Policy.pdf<br>Request access POL311 Risk Management Policy.pdf |
| #### POL303 Information Integrity Policy.pdf<br>Copy link for POL303 Information Integrity Policy.pdf<br>Request access POL303 Information Integrity Policy.pdf |
| #### POL520 System Resources and Capacity Management Policy.pdf<br>Copy link for POL520 System Resources and Capacity Management Policy.pdf<br>Request access POL520 System Resources and Capacity Management Policy.pdf |
| #### POL512 Non-conformities Policy.pdf<br>Copy link for POL512 Non-conformities Policy.pdf<br>Request access POL512 Non-conformities Policy.pdf |
| #### POL310 Incident Management Policy.pdf<br>Copy link for POL310 Incident Management Policy.pdf<br>Request access POL310 Incident Management Policy.pdf |
| #### POL309 Third Party Assurance Policy.pdf<br>Copy link for POL309 Third Party Assurance Policy.pdf<br>Request access POL309 Third Party Assurance Policy.pdf |
| #### POL301 Data Classification Policy.pdf<br>Copy link for POL301 Data Classification Policy.pdf<br>Request access POL301 Data Classification Policy.pdf |
| #### POL314 Media Protection Policy.pdf<br>Copy link for POL314 Media Protection Policy.pdf<br>Request access POL314 Media Protection Policy.pdf |
| #### POL800 Acceptable Use Policy.pdf<br>Copy link for POL800 Acceptable Use Policy.pdf<br>Request access POL800 Acceptable Use Policy.pdf |
| #### POL550 Web filtering Policy.pdf<br>Copy link for POL550 Web filtering Policy.pdf<br>Request access POL550 Web filtering Policy.pdf |
| #### POL540 Software Licensing Policy.pdf<br>Copy link for POL540 Software Licensing Policy.pdf<br>Request access POL540 Software Licensing Policy.pdf |
| #### POL305 Configuration and Change Management Policy.pdf<br>Copy link for POL305 Configuration and Change Management Policy.pdf<br>Request access POL305 Configuration and Change Management Policy.pdf |
| #### POL302 Access and Identity Management Policy.pdf<br>Copy link for POL302 Access and Identity Management Policy.pdf<br>Request access POL302 Access and Identity Management Policy.pdf |
| #### Threat Intelligence Policy.docx.pdf<br>Copy link for Threat Intelligence Policy.docx.pdf<br>Request access Threat Intelligence Policy.docx.pdf |
| #### Penetration Test 2025.pdf<br>Copy link for Penetration Test 2025.pdf<br>Request access Penetration Test 2025.pdf |
| #### Certificate-Lithic-2025-ISO 27001.2022.pdf<br>Copy link for Certificate-Lithic-2025-ISO 27001.2022.pdf<br>Request access Certificate-Lithic-2025-ISO 27001.2022.pdf |
| #### Lithic-2025-ISO 27001 First Surveillance Audit-Final Report.pdf<br>Copy link for Lithic-2025-ISO 27001 First Surveillance Audit-Final Report.pdf<br>Request access Lithic-2025-ISO 27001 First Surveillance Audit-Final Report.pdf |
| #### Insurance_Lithic, Inc._25-26 GL AU UMB Cyber MLP_6-17-2025.pdf<br>Copy link for Insurance_Lithic, Inc._25-26 GL AU UMB Cyber MLP_6-17-2025.pdf<br>Request access Insurance_Lithic, Inc._25-26 GL AU UMB Cyber MLP_6-17-2025.pdf |
| #### W9 Lithic Inc - 2025.pdf<br>Copy link for W9 Lithic Inc - 2025.pdf<br>Request access W9 Lithic Inc - 2025.pdf |
| #### Work Comp COI 7.1.25-7.1.26 .pdf<br>Copy link for Work Comp COI 7.1.25-7.1.26 .pdf<br>Request access Work Comp COI 7.1.25-7.1.26 .pdf |
| #### Lithic-2025-Type 2 SOC 1-Final Report.pdf<br>Copy link for Lithic-2025-Type 2 SOC 1-Final Report.pdf<br>Request access Lithic-2025-Type 2 SOC 1-Final Report.pdf |
| #### Lithic-2025-Type 2 SOC 2-Final Report.pdf<br>Copy link for Lithic-2025-Type 2 SOC 2-Final Report.pdf<br>Request access Lithic-2025-Type 2 SOC 2-Final Report.pdf |
| #### Lithic SOC 1 & SOC 2 Bridge Letter 4_8_2026.pdf<br>Copy link for Lithic SOC 1 & SOC 2 Bridge Letter 4_8_2026.pdf<br>Request access Lithic SOC 1 & SOC 2 Bridge Letter 4_8_2026.pdf |
| #### Anti-Money Laundering and Sanctions Policy v3.6 (October 1, 2025).docx.pdf<br>Copy link for Anti-Money Laundering and Sanctions Policy v3.6 (October 1, 2025).docx.pdf<br>Request access Anti-Money Laundering and Sanctions Policy v3.6 (October 1, 2025).docx.pdf |
| #### STD400 Encryption Standard..pdf<br>Copy link for STD400 Encryption Standard..pdf<br>Request access STD400 Encryption Standard..pdf |

Bulk download will only work on resources that are accessible and not view only.