Security isn't a checklist.
It is a daily commitment backed by robust
engineering and sound policy.
Because Laighthouse processes your advertising and sales data,
our platform was engineered from day one around a single truth:
your business metrics are your most confidential asset.
INFRASTRUCTURE
AWS Cloud
[Security Controls]
· AWS WAF
· AWS CloudTrail
· IAM Access Analyzer
· Amazon GuardDuty
ENCRYPTION
Data Encryption
[Encryption Methods]
· TLS encryption for data in transit
· AES-256 encryption for data at rest
· Key management and periodic rotation via AWS KMS
· Field-level encryption for sensitive data
ACCESS CONTROL
Secure Authentication and Access Management
[Enforcement]
· Google / Microsoft SSO authentication
· Role-based access control (RBAC)
· Automatic session expiry and access logging
· Centralized storage of operational credentials in 1Password
DATA GOVERNANCE
Controlled Data Usage
[Usage Policies]
· Only advertising and sales performance data are used for analysis
· Proprietary data excluded from model training
· Data stored within the domestic (Korea) region
Security isn't a checklist. It is a daily commitment backed by robust engineering and sound policy.
Because Laighthouse processes your advertising and sales data,our platform was engineered from day one around a single truth:your business metrics are your most confidential asset.
INFRASTRUCTURE
AWS Cloud
[Security Controls]
· AWS WAF
· AWS CloudTrail
· IAM Access Analyzer
· Amazon GuardDuty
ENCRYPTION
Data Encryption
[Encryption Methods]
· TLS encryption for data in transit
· AES-256 encryption for data at rest
· Key management and periodic rotation via AWS KMS
· Field-level encryption for sensitive data
ACCESS CONTROL
Secure Authentication and Access Management
[Enforcement]
· Google / Microsoft SSO authentication
· Role-based access control (RBAC)
· Automatic session expiry and access logging
· Centralized storage of operational credentials in 1Password
DATA GOVERNANCE
Controlled Data Usage
[Usage Policies]
· Only advertising and sales performance data are used for analysis
· Proprietary data excluded from model training
· Data stored within the domestic (Korea) region
Security isn't a checklist.
It is a daily commitment backed by robust engineering and sound policy.
Because Laighthouse processes your advertising and sales data,
our platform was engineered from day one around a single truth:
your business metrics are your most confidential asset.
[Security Controls]
· AWS WAF
· AWS CloudTrail
· IAM Access Analyzer
· Amazon GuardDuty
AWS Cloud
INFRASTRUCTURE
[Encryption Methods]
· TLS encryption for data in transit
· AES-256 encryption for data at rest
· Key management and periodic rotation via AWS KMS
· Field-level encryption for sensitive data
Data Encryption
ENCRYPTION
[Enforcement]
· Google / Microsoft SSO authentication
· Role-based access control (RBAC)
· Automatic session expiry and access logging
· Centralized storage of operational credentials in 1Password
Secure Authentication and Access Management
ACCESS CONTROL
[Usage Policies]
· Only advertising and sales performance data are used for analysis
· Proprietary data excluded from model training
· Data stored within the domestic (Korea) region
Controlled Data Usage
DATA GOVERNANCE
01 / PRINCIPLES
Our data policy is built on three non-negotiable principles.
We don't rely on broad marketing claims; we set clear, enforceable standards that we uphold everyday.
01 / PRINCIPLES
Our data policy is built on three non-negotiable principles.
We don't rely on broad marketing claims; we set clear, enforceable standards that we uphold everyday.
01 / PRINCIPLES
Our data policy is built on three non-negotiable principles.
We don't rely on broad marketing claims; we set clear, enforceable standards that we uphold everyday.
RULE 01
Strict Least-Privilege Access
Access to customer data is strictly restricted to authorized core engineering personnel, limited to the minimum scope required for their duties, and granted only through controlled channels. Operational account credentials are stored and shared exclusively through a password manager (1Password), never passed directly between individuals.
RULE 02
Comprehensive Audit Trails
All critical events—including user authentication and data downloads—are recorded in immutable logs, forming a verifiable foundation for trustworthy infrastructure.
RULE 03
Transparent Pipeline Architecture
We make clear where collected data is stored in the cloud and how it is processed, and we openly disclose every data flow to and from external LLM engines.
RULE 01
Access to customer data is strictly restricted to authorized core engineering personnel, limited to the minimum scope required for their duties, and granted only through controlled channels. Operational account credentials are stored and shared exclusively through a password manager (1Password), never passed directly between individuals.
Strict Least-Privilege Access
RULE 02
All critical events—including user authentication and data downloads—are recorded in immutable logs, forming a verifiable foundation for trustworthy infrastructure.
Comprehensive Audit Trails
RULE 03
We make clear where collected data is stored in the cloud and how it is processed, and we openly disclose every data flow to and from external LLM engines.
Transparent Pipeline Architecture
RULE 01
RULE 01
Access to customer data is strictly restricted to authorized core engineering personnel, limited to the minimum scope required for their duties, and granted only through controlled channels. Operational account credentials are stored and shared exclusively through a password manager (1Password), never passed directly between individuals.
Strict Least-Privilege
Access
RULE 02
All critical events—including user authentication and data downloads—are recorded in immutable logs, forming a verifiable foundation for trustworthy infrastructure.
Comprehensive Audit
Trails
RULE 03
We make clear where collected data is stored in the cloud and how it is processed, and we openly disclose every data flow to and from external LLM engines.
Transparent Pipeline
Architecture
02 / CONTROLS
Our Security Controls in Place
Moving beyond abstract security claims, here are the explicit technical controls enforced across our product and infrastructure.
02 / CONTROLS
Our Security Controls in Place
Moving beyond abstract security claims, here are the explicit technical controls enforced across our product and infrastructure.
02 / CONTROLS
Our Security Controls in Place
Moving beyond abstract security claims, here are the explicit technical controls enforced across our product and infrastructure.
LIVE
Strong Encryption Standards
Personal data is encrypted at rest in the database, and all data in transit over the web is protected with the latest TLS specification.
LIVE
Multi-Tenant Data Isolation
Customer data is kept separate by tenant from the moment it enters our ELT pipeline. Row-Level Security (RLS) on the service database blocks cross-tenant access at the database level.
LIVE
Multi-Tenant Data Isolation
Customer data is kept separate by tenant from the moment it enters our ELT pipeline. Row-Level Security (RLS) on the service database blocks cross-tenant access at the database level.
LIVE
Strong Encryption Standards
Personal data is encrypted at rest in the database, and all data in transit over the web is protected with the latest TLS specification.
LIVE
Centralized Authentication (SSO)
We support Google Workspace and Microsoft SSO to enable seamless, enterprise-grade access control and identity management.
LIVE
Centralized Authentication (SSO)
We support Google Workspace and Microsoft SSO to enable seamless, enterprise-grade access control and identity management.
LIVE
Tamper-Proof Audit Logs
Access to and download attempts on customer data are consolidated, recorded and monitored in a centralized secure log store.
LIVE
Tamper-Proof Audit Logs
Access to and download attempts on customer data are consolidated, recorded and monitored in a centralized secure log store.
LIVE
One-way Cryptographic Hashing
Administrator credentials are protected using salted SHA-256 (or stronger) cryptographic hashing, eliminating any risk of plaintext exposure.
LIVE
One-way Cryptographic Hashing
Administrator credentials are protected using salted SHA-256 (or stronger) cryptographic hashing, eliminating any risk of plaintext exposure.
LIVE
Incident Response Governance
Upon detection of unusual activity or potential security incidents, our response team is immediately deployed, with prompt customer notification in accordance with compliance standards.
LIVE
Incident Response Governance
Upon detection of unusual activity or potential security incidents, our response team is immediately deployed, with prompt customer notification in accordance with compliance standards.
LIVE
Strong Encryption Standards
Personal data is encrypted at rest in the database, and all data in transit over the web is protected with the latest TLS specification.
LIVE
Multi-Tenant Data Isolation
Customer data is kept separate by tenant from the moment it enters our ELT pipeline. Row-Level Security (RLS) on the service database blocks cross-tenant access at the database level.
LIVE
Centralized Authentication (SSO)
We support Google Workspace and Microsoft SSO to enable seamless, enterprise-grade access control and identity management.
LIVE
Tamper-Proof Audit Logs
Access to and download attempts on customer data are consolidated, recorded and monitored in a centralized secure log store.
LIVE
One-way Cryptographic Hashing
Administrator credentials are protected using salted SHA-256 (or stronger) cryptographic hashing, eliminating any risk of plaintext exposure.
LIVE
Incident Response Governance
Upon detection of unusual activity or potential security incidents, our response team is immediately deployed, with prompt customer notification in accordance with compliance standards.
03 / SUBPROCESSORS
We disclose every subprocessor that handles your data.
Every vendor we contract with for infrastructure and data processing is carefully vetted to meet our rigorous security standards.
03 / SUBPROCESSORS
We disclose every subprocessor that handles your data.
Every vendor we contract with for infrastructure and data processing is carefully vetted to meet our rigorous security standards.
Amazon Web Services
Purpose and data role
Core cloud infrastructure and customer database storage
Data protection measures
Encryption at rest (S3), data retained in the Seoul region, infrastructure certified to ISO 27001 and SOC 2
OpenRouter
Purpose and data role
LLM engine for data analysis and summarization (API only)
Data protection measures
No prompt-log retention per OpenRouter policy, transmitted over TLS encryption
Provider
Provider
Purpose and data role
Purpose and data role
Data protection measures
Data protection measures
Amazon Web Services
Amazon Web Services
Core cloud infrastructure and customer database storage
Core cloud infrastructure and customer database storage
Encryption at rest (S3), data retained in the Seoul region, infrastructure certified to ISO 27001 and SOC 2
Encryption at rest (S3), data retained in the Seoul region, infrastructure certified to ISO 27001 and SOC 2
OpenRouter
OpenRouter
LLM engine for data analysis and summarization (API only)
LLM engine for data analysis and summarization (API only)
No prompt-log retention per OpenRouter policy, transmitted over TLS encryption
No prompt-log retention per OpenRouter policy, transmitted over TLS encryption
03 / SUBPROCESSORS
We disclose every subprocessor that handles your data.
Every vendor we contract with for infrastructure and data processing is carefully vetted to meet our rigorous security standards.
03 / SUBPROCESSORS
We disclose every subprocessor that handles your data.
Every vendor we contract with for infrastructure and data processing is carefully vetted to meet our rigorous security standards.
04 / ADVISORY COUNCIL
Dedicated External Security Oversight
Security requires independent validation. Our platform architecture is audited every quarter by a seasoned security leader with a proven track record of protecting high-traffic infrastructure in fintech, large-scale e-commerce, and online gaming.
04 / ADVISORY COUNCIL
Dedicated External Security Oversight
Security requires independent validation. Our platform architecture is audited every quarter by a seasoned security leader with a proven track record of protecting high-traffic infrastructure in fintech, large-scale e-commerce, and online gaming.
04 / ADVISORY COUNCIL
Dedicated External Security Oversight
Security requires independent validation. Our platform architecture is audited every quarter by a seasoned security leader with a proven track record of protecting high-traffic infrastructure in fintech, large-scale e-commerce, and online gaming.
Teddy has served for more than 15 years as a Chief Information Security Officer across some of Korea's most heavily regulated enterprise environments, including fintech, large-scale e-commerce and gaming entertainment. He is currently studying data privacy protection at Korea University's Graduate School of Cybersecurity.
Teddy has served for more than 15 years as a Chief Information Security Officer across some of Korea's most heavily regulated enterprise environments, including fintech, large-scale e-commerce and gaming entertainment. He is currently studying data privacy protection at Korea University's Graduate School of Cybersecurity.
Teddy has served for more than 15 years as a Chief Information Security Officer across some of Korea's most heavily regulated enterprise environments, including fintech, large-scale e-commerce and gaming entertainment. He is currently studying data privacy protection at Korea University's Graduate School of Cybersecurity.
Major Korean game studio
Head of company-wide information security and infrastructure protection
Major Korean game studio
Major Korean game studio
Head of company-wide information security and infrastructure protection
Head of company-wide information security and infrastructure protection
Security Lead
Security Lead
Major e-commerce platform
Chief Information Security Officer and Chief Privacy Officer
Major e-commerce platform
Major e-commerce platform
Chief Information Security Officer and Chief Privacy Officer
Head of company-wide information security and infrastructure protection
CISO · CPO
CISO · CPO
Online digital finance (fintech platform)
Chief Information Security Officer and Chief Privacy Officer
Online digital finance (fintech platform)
Online digital finance (fintech platform)
Chief Information Security Officer and Chief Privacy Officer
Chief Information Security Officer and Chief Privacy Officer
CISO · CPO
CISO · CPO
Korea University, Graduate School of Cybersecurity
Graduate research in data compliance and converged security frameworks
Korea University, Graduate School of Cybersecurity
Korea University, Graduate School of Cybersecurity
Graduate research in data compliance and converged security frameworks
Graduate research in data compliance and converged security frameworks
Enrolled
Enrolled