Lattice
Security and trust center evidence
Modern people management platform.
Summary
Lattice has 3 vendor-stated rows, and 1 expired in the CertReports index, last verified 2 Nov 2026. The strongest row is SOC 2: Vendor states SOC 2 on its trust centre. This page is independent of the vendor’s own trust centre: dates, sources and caveats come from CertReports captures.
Reviewer brief
Lattice states on its trust centre, as of 18 Sep 2026, that it has a SOC 2 report covering its security controls. The vendor also states on its trust centre, as of 18 Sep 2026, that it addresses GDPR and CCPA / CPRA requirements for personal data. Lattice's entry in the EU-US Data Privacy Framework registry, as of 17 Sep 2026, is listed as inactive, meaning the certification is not currently in force. No public evidence found for ISO/IEC 27001 or PCI DSS. No public evidence found for HIPAA, FedRAMP or CSA STAR.
- SOC 2 report stated on trust centre as of 18 Sep 2026 - vendor statement, not registry-verified.
- GDPR and CCPA / CPRA stated on trust centre as of 18 Sep 2026.
- EU-US Data Privacy Framework registry listing is inactive as of 17 Sep 2026.
Facts only, each dated; nothing here is inferred, scored or advised. Brief generated 19 Sep 2026; it is regenerated whenever a row changes.
Among hr and hris vendors
0verified rows
Category median 0, across 94 indexed hr and hris vendors. Lattice has no registry-verified row yet, like 56 percent of them; its evidence is vendor-stated or reported.
employee engagementhr platformpeople managementperformance management
Compare with similar vendors
Pick your own comparisonCompliance grid
SOC 2Vendor-statedVendor states SOC 2 on its trust centre
as of 2 Nov 202622 sources
GDPRVendor-statedVendor states GDPR on its trust centre
as of 2 Nov 202622 sources
EU-US Data Privacy FrameworkExpiredInactive
as of 2 Nov 20261 source
CCPA / CPRAVendor-statedVendor states CCPA on its trust centre
as of 2 Nov 202622 sources
Legal artefacts
Subprocessors
No subprocessor list captured yet.
Security profile
- Pen test cadence
- report available
Displayed as a security profile from public statements, not as attestations, as of 2 Nov 2026.
Change history
- 22 Sep 2026DPA changedThe data processing agreement URL changed.
- 18 Sep 2026CCPA / CPRA evidence addedA CCPA / CPRA row entered the index with state Vendor-stated.
- 18 Sep 2026GDPR evidence addedA GDPR row entered the index with state Vendor-stated.
- 18 Sep 2026SOC 2 evidence addedA SOC 2 row entered the index with state Vendor-stated.
Similar vendors with evidence
Related by product tags and the HR and HRIS category, ranked by shared tags, description similarity and overlapping evidence. Never by popularity.
Culture Amp
HR and HRIS
Empower your teams and fuel positive change with performance, development, and employee engagement tools – all-in-one intuitive employee
15Five
HR and HRIS
15Five is the performance management platform that creates effective managers, highly engaged employees, and top-performing
Quantum Workplace
Collaboration
Build thriving teams with Quantum Workplace's HR
Mesh
HR and HRIS
Performance management platform that fits the way you work
Evidence against regulations
All regulations for LatticeHow much of each regulation’s vendor requirements Lattice’s public evidence reaches.
Reviewing a vendor on public evidence
All articlesWhat Is Third-Party Risk Management (TPRM)? A Practical Guide
Solomon Amos · 2 Nov 2026 · 10 min read
What Is a Trust Centre? Vendor Evidence vs Office Settings
Solomon Amos · 28 Oct 2026 · 10 min read