Account protection
Strong-password validation, rate-limited sign-in attempts, password recovery, optional TOTP two-factor authentication, and single-use recovery codes.
Security at LotThread
Protect the record behind every lot.
LotThread is designed to keep each company’s production history private, attributable, recoverable, and available to the people who need it.
Protection status
✓ Private, tenant-isolated workspaces
✓ Optional authenticator-app 2FA
✓ Role-based access controls
✓ Timestamped operational history
✓ Privacy export and deletion workflows
Workspace isolation
Operational records are scoped to the signed-in user’s organization. Roles limit sensitive workspace and quality actions.
Record integrity
Trace events preserve who performed an action, what changed, and when. Core ledger records are protected from ordinary rewriting.
Payments
Stripe handles checkout and card information. Payment card details do not pass through or remain in LotThread.
Privacy controls
Optional analytics remain off until consent. Administrators can request structured exports and managed workspace deletion.
Responsible disclosure
Found a security concern? Please send the details through our contact page so it can be investigated promptly.
Contact LotThread →Clear about the boundary
Security is an ongoing operating practice, not a badge. This page describes safeguards present in LotThread today. Customers remain responsible for choosing appropriate user access, protecting their devices and authenticator recovery codes, and validating that LotThread fits their own regulatory obligations.