Trust Center
Welcome to League’s Trust Center
League is committed to safeguarding the security, privacy, and integrity of the data entrusted to us. This Trust Center provides transparency into our security practices, compliance certifications, and answers to the most common questions about how we protect your information.
Our controls are independently validated through SOC 2 Type 2, HITRUST, and ISO audits, confirming alignment with industry-leading standards. Customers and partners may request access to these reports for detailed insight into our compliance program.
We take a layered approach to protection—encryption, multi-factor authentication, monitoring and alerting, business continuity planning, and regular penetration testing—to ensure data remains secure.
This Trust Center is your one-stop resource for understanding how League protects sensitive health and personal data while meeting regulatory requirements.
Highmark
Baptist Health
Santa Clara Family Health Plan
Medibank Private Health Insurance
Shoppers Drug Mart
Manulife
EmblemHealth
Trust Center Updates
Security Advisory: PHP2Shell (CVE-2026-109618, CVE-2026-109619)
Summary
On October 20, 2026, details of two critical flaws in PHP were made public. Together they are known as PHP2Shell (CVE-2026-109618 and CVE-2026-109619).
Impact and Investigation
Core Services Unaffected: We have found no impact on League services.
Data Exposure Status: No customer data has been affected.
Additional Protection: League deployed additional endpoint security sensors to block attempted exploitation of these vulnerabilities as of October 22, 2026.
Sub-processors: We are monitoring the status of League sub-processors, and will provide additional notice if we have potential impact to our services as a result.
Customer Action: League customers don't need to do anything. If you run PHP in your environment, we recommend updating to a fixed version as soon as possible.
Please contact your League account manager with any questions.