Lookout uses a subservice organization for cloud hosting services. Lookout is responsible for its service commitments and system requirements and for designing, implementing, and operating effective controls within the system to provide reasonable assurance that Lookout's service commitments and system requirements were achieved.

The Lookout Security Platform software utilizes Amazon Web Services (AWS) for cloud hosting services. AWS is responsible for providing the physical safeguarding of the information technology (IT) infrastructure to help ensure that unauthorized access to the IT infrastructure does not occur, as well as providing environmental safeguards against certain environmental threats. AWS is also responsible for managing logical access to the underlying network, virtualization management, and storage devices for its cloud hosting services where the Lookout Security Platform resides.

This profile is applicable to the following Lookout products:

• Mobile Endpoint Security (MES) - App Security Review, Personal Security, and Threat Intelligence
• SASE (restricted to the FedRAMP/StateRAMP) - SD-WAN, ZTNA, CASB and SWG
• SSE environment for Lookout's (Federal and State customers)

Please explore our documentation related to this product line and let us know if there are any follow up questions or concerns.

• Here are some external links that may be of interest:
  • The Lookout website - https://www.lookout.com/
  • The Lookout Compliance Corner - https://www.lookout.com/legal/compliance-corner
  • The Lookout Legal page - https://www.lookout.com/legal

*Lookout conducts annual audits with their third party auditors of choice (3PAO)

If you have additional questions email compliance@lookout.com