IT Security

Security is our Top Priority

Lehn & Partner relies on high-availability IT architecture, failsafe strategies and professional protection, security and backup of all business-relevant data. We provide proof of these measures to our clients in the form of our DIN EN ISO/IEC 27001:2022-certified information security management system (ISMS). Alongside regular internal audits, the quality of our information security organization is confirmed annually by German expert organization DEKRA in a multi-day external audit.

Certificate ISO 27001
Our IT service provider, LANx GmbH, has been serving us since 2010 and is certified according to DIN EN ISO 9001:2015, ISO/IEC 27001:2022 and DIN EN 50600 CAT III.

Organization

We process our client assignments using customer relationship software (CRM) and enterprise resource planning software (ERP). These software solutions cover all relevant workflow and valuation steps involved in preparing an expert report or appraisal, from receipt of order to invoicing, and thus ensure assignments are completed meticulously and on schedule.

Our documents are archived electronically in a tamper-proof IDW PS 880-certified document management system. protected by a role-based document access system.

Emails

Email is the commonest method of sharing data in business situations. Here is an overview of the most common encryption processes used by Lehn & Partner:

S/MIME with X.509 certificates: The standard for secure business emailing. Lehn & Partner signs all outgoing mails with the sender’s personal key. Clients can import the key into their email program to encrypt their response mails. If a client receives an email from us with an smime.p7s attachment, this indicates the client’s email program is unable to work with signed emails. In addition, all Lehn & Partner certificates are stored at the Zertificon Global TrustPoint at globaltrustpoint.com.
PGP: Our public PGP key can be downloaded from globaltrustpoint.com. It is issued for our main email address, mail@lehn-partner.com. To find the key, enter mail@lehn-partner.com in the search box. In addition, all mails to personal email addresses in the format firstname.lastname@lehn-partner.com can be encrypted.
Encrypted PDF: Clients without their own encryption key or certificate can receive confidential data from us in the form of an encrypted PDF file. The client receives a confidential password in advance, which applies to all following emails. The email from the encrypted PDF file can be exported and further processed as usual in the client’s email program or archived.

Cloud solution

Lehn & Partner provides a bespoke cloud solution for sharing large data volumes, based on LP’s own servers to ensure security. Guaranteed protection of sensitive information is effected by state-of-the-art encryption and strict security protocols. Contact us for further information.