Trust Center
At Lattice, customer trust is our #1 priority.
We maintain the highest standards of data privacy and security because we know your employee data is important to keep secure. Lattice undergoes regular penetration testing and security reviews, designed to be GDPR compliant, and encrypts data at rest and in transit. Our customers entrust sensitive data to our care. Keeping it secure is our promise.
OpenAI
Duolingo
Intercom
AllTrails
Discord
Robinhood
Gusto
Brex
Bombas
Mozilla
Greenhouse
NPR
Trust Center Updates
PHP2Shell Vulnerabilities (CVE-2026-109618 and CVE-2026-109619)
October 21, 2026
PHP2Shell refers to vulnerabilities tracked as CVE-2026-109618 and CVE-2026-109619.
Lattice is aware of the reported PHP2Shell vulnerabilities and has reviewed their relevance to our environment.
We can confirm that Lattice does not use PHP in its infrastructure or services. Therefore, these vulnerabilities do not affect Lattice systems, and no PHP-specific mitigation or remediation is required.
We will continue to monitor relevant security developments and will take appropriate action if the scope or potential impact of this issue changes.