Lively

Security and trust center evidence

Modern employee benefits & health savings account (HSA) provider

livelyme.com Benefits and insuranceLast verified 30 Sep 2026

Request the report Are you Lively?

Lively has 5 vendor-stated rows in the CertReports index, last verified 30 Sep 2026. The strongest row is HIPAA: Vendor displays a HIPAA badge on its trust centre (claim; BAA availability not yet captured). This page is independent of the vendor’s own trust centre: dates, sources and caveats come from CertReports captures.

Reviewer brief

Lively states on its trust centre that it displays a HIPAA badge, as of 18 Sep 2026, though the evidence does not confirm whether a BAA is offered. For SOC 2, Lively states on its trust centre that it holds SOC 2, as of 18 Sep 2026. For PCI DSS, Lively states on its trust centre PCI DSS - SAQ D, as of 18 Sep 2026. For SOC 1, Lively states on its trust centre that it holds SOC 1, as of 18 Sep 2026. For CCPA / CPRA, Lively states on its trust centre CCPA, as of 18 Sep 2026.

HIPAA: vendor states a HIPAA badge on its trust centre as of 18 Sep 2026 - BAA availability not confirmed in evidence.
SOC 2: vendor states on its trust centre that it holds SOC 2, as of 18 Sep 2026 - vendor-stated, no Type II or auditor detail given.
PCI DSS: vendor states PCI DSS - SAQ D on its trust centre, as of 18 Sep 2026.

Facts only, each dated; nothing here is inferred, scored or advised. Brief generated 20 Sep 2026; it is regenerated whenever a row changes.

Among benefits and insurance vendors

0verified rows

Category median 1, across 24 indexed benefits and insurance vendors. Lively has no registry-verified row yet, like 29 percent of them; its evidence is vendor-stated or reported.

benefits administrationemployee benefitsfsahsa

Compare with similar vendors

Pick your own comparison

Compliance grid

No public evidence yet for GDPR, FedRAMP, ISO 27001, CSA STAR, Cyber Essentials, ISO 27701, ISO 42001. This does not mean the vendor lacks them; it means nothing public was found at the last check.

Legal artefacts

Subprocessor list

Public · 32 subprocessors listed on the trust centre · as of 30 Sep 2026

Open

Public · as of 30 Sep 2026

Open

AI and data use policy

On request · Listed on the trust centre as "AI Governance Policy" · as of 30 Sep 2026

Open

Subprocessors (32)

Amazon Web ServicesCloud provider · us-west-1, us-east-2
AnthropicAI tools and models
Arkose LabsBot mitigation service
AtlassianInternal ticketing
CS
Charles SchwabInvestment provider
CB
Choice bankBanking and ACH services
CloudflareCloud provider
DE
DevenirInvestment provider
EP
Echo PaymentsBill payment
ElevenLabsCustomer support
FiservCard processing
Google WorkspaceEmail and office productivity applications
HubSpotMarketing and customer emails
LA
LandingAIData storage and processing
LF
Lincoln FinancialInvestment provider
MA
MastercardCard transactions
OpenAIAI tools and models
OS
OscilarFraud risk platform
PendoSoftware Experience Management
PlaidBank connectivity
salesforceCRM
SegmentCustomer analytics platform
SendGridMarketing and customer emails
SE
SendSafelySecure email
SiftFraud risk platform
SplunkCloud SIEM provider
TalkdeskVoice calls
TB
The BancorpCard processing
TS
TPA StreamClaims sync
VI
VisaCard transactions
ZendeskCustomer support tools
ZscalerNetwork security service

Security profile

Pen test cadence: annual

Displayed as a security profile from public statements, not as attestations, as of 30 Sep 2026.

Change history

27 Sep 2026Subprocessor added: ElevenLabsElevenLabs appeared on the subprocessor list.
27 Sep 2026Subprocessor added: LandingAILandingAI appeared on the subprocessor list.
18 Sep 2026First indexed by CertReports5 evidence rows across 5 frameworks entered the index.

Similar vendors with evidence

Related by product tags and the Benefits and insurance category, ranked by shared tags, description similarity and overlapping evidence. Never by popularity.