Enterprise-grade security.
At Liberate, keeping your carrier operations and policyholder data safe is our highest priority. We deploy rigorous technical controls and are fully aligned with HIPAA, SOC 2 Type II, and PCI compliance standards.
Let’s talk
Why choose Liberate?
Our infrastructure is engineered from the ground up to support high-compliance insurance processes with zero-trust architectures.
Role & Attribute-Based Access
Role-based access controls ensure only authorized users can access your data, keeping it secure. Plus, role and attribute-based permissions let you customize access even within the same role.
Version Management
Amazon CloudTrail logs and tracks account activity across our AWS infrastructure, letting you see who made changes and easily revert to previous versions if needed.
Project-Based Permissions
Use project-based permissions to give teams access to specific information, even when they're working on the same project.
Enterprise-Grade Encryption
We encrypt all data, including third-party sources, adding an extra layer of security whether it's in transit or at rest.
Secure Integration
Your integration credentials are encrypted both in transit and at rest.
Data Structure
Unlike typical multi-tenant systems, Liberate never mixes your data with that of other customers.
Near-perfect Uptime
You can rely on the Liberate platform, with near-perfect uptime, to be there when you need it.



Certifications.
We are audited annually by independent third-party assessors to verify that our security controls meet and exceed rigorous modern standard security frameworks. Access our latest SOC 2 report, pentest summaries, and policy manuals directly from our portal.
FAQs.
Have questions about how we keep your business and policyholder data secure? Browse our commonly asked questions.
Is my data secure?
Yes, Liberate follows top data security practices, including encryption and backups, to keep your information safe. Our SOC 2 certification verifies our strong security measures.
Does Liberate have a CCPA Notice?
Yes, Liberate follows top data security practices, including encryption and backups, to keep your information safe. Our SOC2 certification verifies our strong security measures.
Will my data be commingled?
No, we get that many insurers prefer not to have their data mixed with others, so we’ve designed Liberate to give each organization its own unique instance.
Does Liberate perform regular testing?
Yes, security is a top priority. Liberate regularly conducts penetration tests to find and fix any vulnerabilities before they can be exploited.
Does Liberate support SSO?
Yes, Liberate supports single sign-on, allowing you to securely access all integrated systems with just one set of credentials through the user portal.
Still have questions?
If you have any other questions or concerns regarding our security measures, please don't hesitate to reach out to us. We're here to help.