Measures to protect your data
LamaPoll applies strict measures to protect the security, confidentiality and availability of your survey data. Our online survey tool is designed for use in privacy-sensitive environments and supports you in running GDPR-compliant online surveys.
We provide a secure and stable online service. If required, you can request a detailed security overview from our support team.
Table of Contents
ISO 27001 certified company
The first and only company in Germany:
the operation and development of our Software-as-a-Service
for Enterprise Feedback Management is certified in accordance with the ISO/IEC 27001, 27017 and 27018 standards.
- ISO 27001 certified company: our entire company, not just our subcontractors, is ISO 27001 certified
- Effectively implemented information security: ISO/IEC 27001 is an internationally recognised standard for an information security management system (ISMS).
- Additional ISO certifications: ISO 27017 for maximum cloud security and ISO 27018 for data protection in the cloud at the highest level.
- We guarantee our customers the highest security standards and ensure compliance with laws and regulations.
- A standards-compliant management system, secured IT systems and systematic process and risk management.
Our survey tool: encrypted in a German data centre
Source: Federal Office for Information Security
- IS Webcheck: IS Webchecks carried out by the BSI Federal Office for Information Security (backend and frontend)
- Penetration test: Would you like a comprehensive security test? Gladly. Arrange an appointment with us for a penetration test.
- Maximum security: Backups several times a day and redundant, mirrored hard drives ensure maximum security for your data
- Full encryption: All access to our systems by our employees, whether support staff or system administrators, as well as by customers and participants, is encrypted. All your data on our servers is stored in encrypted form.
- Servers, workstations and applications are always kept up to date and patched with the latest security updates.
- Multi-level protective measures protect against both common and lesser-known vulnerabilities and attack vectors for web-based software solutions, such as brute force, packet sniffing, XSRF, XSS, SQL injection and much more.
- Strict coding, password and conduct guidelines, together with standardised procedures for maintenance and development, sustainably ensure the quality and security of our service.
TISAX® certified company
Security and protection for customer data with high protection requirements
- Internationally and industry-wide recognised standard for information security in the automotive industry
- Secure processing and confidentiality of information from business partners and customers
- Optimised system for exchanging standardised assessment results in the automotive industry (VDA)
- Reliable and professional handling of data with high protection requirements
TISAX® is a registered trademark of the ENX Association. With TISAX (Trusted Information Security Assessment Exchange), the ENX Association supports the mutual recognition of information security assessments in the automotive industry on behalf of the VDA.
Official prequalification for public contracts
Reliable, capable and professionally suitable for public-sector projects
Our company has been independently reviewed and is listed in the Official Register of Companies and Suppliers (ULV) of the State of Berlin. The ULV is a register maintained by the State of Berlin and is used specifically for public tenders. Entry in the official register simplifies the handling of projects for public-sector clients, as all required evidence of professional suitability, capability and reliability has already been provided. Proof of verified suitability is recognised throughout Germany.
The ULV prequalification shows that our company:
- has been reviewed and classified as reliable
- meets all formal and professional requirements for public contracts
- is listed in an official, publicly accessible register
The ULV information service is intended to make public procurement easier for authorised public-sector clients and their contractors. Public-sector clients can check the ULV entry via the ULV information service on the website of the Senate Department for Urban Development, Building and Housing by entering the company name, ULV number and CPV code: ULV information service
- Company: Lamano GmbH & Co. KG
- ULV no.: 11/018055
- CPV code: 72
Certified servers
- Hosting in Germany: both the company location and server location are in Germany
- All servers are located in high-performance data centres.
- Our data servers (data centre) have independent TÜV certification in accordance with DIN ISO 27001
- All statutory requirements are complied with including fire protection, theft protection, data protection, maintenance and flood protection.
- Almost 100% availability through autonomous and redundant power supply, cooling and internet connectivity. The survey tool is generally provided without interruption.
- Additional security is provided by early fire detection using laser particle detectors and almost complete video monitoring of the facility.
- The data centres are staffed by specialists around the clock.
Current subprocessors / subcontractors under the GDPR:
Confidentiality of Your Data
A Privacy-Trained Team
Availability & Backups
Tips for Your Own Protection
Always keep your browser up to date. Security updates close known vulnerabilities and reduce the risk of login credentials or survey data being exposed through outdated browser features.
Enable automatic updates where possible, and avoid using outdated browser versions when working with sensitive surveys.
Log out actively when you no longer need LamaPoll — especially on shared or mobile devices. This helps prevent an open session from being used unintentionally by someone else.
You can also configure a short session timeout so users are logged out automatically after a period of inactivity.
Choose passwords that are long and hard to guess. Passphrases with more than 12 characters are a good choice, ideally combined with uppercase and lowercase letters, numbers and special characters.
- Avoid simple passwords such as “12345”, “abc123” or dictionary words.
- Do not use terms that others could easily infer from your surroundings — such as names, hobbies, visible items at your workplace or publicly known information.
- Do not reuse a password for LamaPoll that you already use for other services.
- Never share passwords with third parties. Passwords are personal and intended only for the respective account.
Do not store passwords unprotected in your browser, notes, spreadsheets or emails. These locations can be read, synced or shared unintentionally.
Use a trusted password manager instead. Protect it with a strong master password and — where available — two-factor authentication.
Don’t click suspicious links and verify sender addresses carefully — even for emails that appear to come from LamaPoll. When in doubt: don’t click. Log in via the official URL instead, or contact support.
When you download survey data, it leaves the protected LamaPoll environment. Exported files should therefore also be protected against unauthorised access on your own systems.
- Store exports only in secure locations.
- Limit access rights to people who actually need the data.
- Encrypt particularly sensitive files or storage locations where this is part of your organisation’s security practice.
- Delete downloaded data securely once it is no longer needed.
Together with the Federal Office for Information Security (BSI), we conducted a security survey for the first time. The participating companies had high requirements for data protection, cybersecurity and anonymity. LamaPoll met them very well, both technically and organisationally. A contact person was also available whenever needed. We are extremely satisfied with the cooperation.
Do you have questions for our team?
We're happy to answer any questions you have about security at LamaPoll.
Do not hesitate to contact us.
