Security and data use
Table of Contents
- SOC 2 Type II assurance
- Request the report
- Encryption and access
- How we use your data
- Does data contribute to model training?
- Retention and deletion
Leni helps real estate and investment teams work with connected data and documents. This page explains our security controls, independent assurance and data-use practices.
SOC 2 Type II assurance
Leni has completed an independent SOC 2 Type II examination conducted by Johanson Group LLP. The examination addresses controls relevant to the Security Trust Services Criteria.
Completed report reference period: February 7 to May 7, 2024. Request the latest issued report to confirm the examination period, system boundaries and controls applicable to your review.
Request the report
Email info@leni.co with your company and security-review requirements. Our team can provide the SOC 2 report and supporting security information through the vendor-review process, subject to a non-disclosure agreement where required.
Encryption and access
Customer data is encrypted in transit using TLS and encrypted at rest. Leni supports single sign-on and role-based access controls. Contact our team to confirm the identity-provider and provisioning requirements for your organization.
How we use your data
You retain ownership of your original Customer Content. Leni processes it to provide, secure, support and improve the service and produce the outputs you request.
Does data contribute to model training?
Our published terms permit Leni to use de-identified and derived data from Customer Content, outputs, feedback and usage for AI training, evaluation, validation and other purposes, including commercial data products. Those commercial products do not include personal information or information that identifies a customer, organization, property or building unless a separate written agreement permits it. A separate customer agreement may add to or control over the Privacy Policy.
Retention and deletion
We retain personal information and Customer Content as needed for the service, the purposes in our Privacy Policy and legal obligations. The period depends on the data, customer relationship, security needs and backup cycles. De-identified and derived data may be retained longer or indefinitely where permitted by law. Contact info@leni.co for your organization's requirements or a privacy-rights request.
Read the Privacy Policy and Terms & Conditions for the full rules and applicable rights.
Security overview reviewed October 21, 2026. The overview review date is separate from the audit examination period.
