Security Policy

LBOX Security Policy LBOX.com, LLC Effective Date: April 15, 2026 Contact: security@lbox.com Purpose LBOX maintains administrative, technical, and physical safeguards designed to protect the confidentiality, integrity, and availability of its systems, platform data, account information, and related services. This Security Policy provides a high-level summary of LBOX's security posture. It does not create contractual warranties, expand any service commitments, or disclose sensitive security details that could increase risk to LBOX, its users, or third parties. Scope This policy applies to LBOX's websites, applications, search tools, messaging features, account systems, internal business systems, hosted infrastructure, and data-processing workflows used to operate the platform. Security Principles We apply layered safeguards based on least privilege, need-to-know access, role-based controls, logging, monitoring, and practical risk reduction. We limit access to production systems and sensitive business information to authorized personnel with a legitimate business need. We periodically review controls and adjust them in light of business changes, vendor changes, legal requirements, and evolving risk. Technical Safeguards LBOX uses technical safeguards that may include encryption in transit, access controls, authentication controls, secure session handling, logging, monitoring, traffic filtering, and vulnerability remediation workflows. Sensitive configuration details, vendor architecture specifics, and security tooling configurations are intentionally not published in this public policy. No Guarantee No security program can eliminate all risk. LBOX does not warrant that its services, systems, or data will be immune from every security threat, interruption, or unauthorized act. Contact For security questions or to report a suspected security issue, contact security@lbox.com.