Security at LanceNest

LanceNest does not accept or process classified information, Controlled Unclassified Information (CUI), Federal Contract Information (FCI), export-controlled data, government system credentials, or security clearance records. Clearance information on profiles is self-reported and is not verified by LanceNest.

Service documents and the matching photo ID go straight from the member’s browser into private, access-restricted storage. An authorized reviewer, signed in with two-step login, opens them through links that expire after 10 minutes, and every opening is recorded in an access log. The reviewer compares them by eye (no face-matching software), and both are deleted as soon as the reviewer approves or rejects them. Files that are never reviewed are deleted automatically after 30 days, and uploads never submitted for review are deleted within 48 hours. Military and VA ID cards and clearance records are never accepted.

Data is encrypted in transit (TLS) and at rest by our infrastructure providers. Database-level access rules govern every table. Administrator access requires two-step verification. Sessions expire after 30 minutes of inactivity, and members are alerted to sign-ins from new devices.

Card and bank payments are processed by Stripe; LanceNest never stores card numbers. Freelance milestone payments are held and released through Stripe Connect.

We use established providers for hosting (Vercel), database and storage (Supabase), payments (Stripe), email (Resend), and bot protection (Cloudflare Turnstile).

Found a vulnerability or a security issue? Tell us through the Help page, or email support@lancenest.com with “Security” in the subject. We review every report.