Skip to main content
Lusha combines account-level security controls with data protection measures and compliance certifications to help your team use Lusha’s data responsibly.

​
Account security

  • Password protection - Lusha enforces minimum password strength requirements, and you can update your password from Settings.
  • Single sign-on (SSO) - Scale plan customers can configure SAML 2.0-based SSO through an identity provider such as Okta or Azure AD, so team members sign in with your company identity provider.
  • Session management - you can sign out of all active sessions from Settings.
  • Inactivity timeout - Scale plans can configure automatic logout after a set period of inactivity.

​
Data security

  • Encryption in transit - all data transmitted to and from Lusha uses TLS encryption.
  • Encryption at rest - stored data is encrypted at rest.
  • Access controls - role-based access control (RBAC) limits what each team member can see and do, based on their assigned role. See Team management for how roles work.

​
Compliance

Lusha maintains SOC 2 Type II certification and commits to GDPR compliance. SOC 2 reports are available to Scale plan customers, or to accounts that exceed $10,000 in transactions. Lusha also undergoes penetration testing; its most recent assessment rated findings as very low risk.
You can find more detail on Lusha’s certifications and policies at the Lusha Trust Center.

​
Do Not Call (DNC) tables

Lusha can hide phone numbers that appear on national do-not-call registries across search results, the browser extension, workspace tables, and CSV enrichment. This currently covers the UK (TPS and CTPS) and the US.
DNC tables are available on Scale plans only, and only a Lusha Admin can enable them.
To enable DNC filtering, an Admin goes to Account & Settings → Privacy and selects which countries’ DNC tables to apply. Once enabled, matching phone numbers are hidden, while other contact data - like email - remains visible if available.

​
Data subject rights and opt-outs

Lusha also provides ways for individuals to exercise their data rights and for your team to stay compliant with privacy laws when using B2B data for outreach, including handling opt-out requests from contacts.

​
Reporting a security concern

If you discover a security vulnerability, report it to security@lusha.com.

​
Next steps

Team management

Set up roles and permissions that support your security requirements.

Billing & plans

Check which security features are included in your current plan.