Better Health for All

Lantronix's medical IoT solutions, including EDS-MD, SGX 5150-MD, and xPico 250 IoT Gateway, are designed to improve patient care, streamline healthcare operations, and enable efficient treatment delivery in various settings, including remote locations.

These products facilitate secure medical device communication, patient data protection, and rapid molecular diagnostic testing, aiming to help medical professionals save lives and reduce potential for errors. However, the proportion of the company's overall product portfolio dedicated to health benefits is not specified, leading to a neutral score for overall health impact. The EDS-MD and SGX 5150-MD products are UL and IEC-60601 compliant or certified, indicating adherence to medical safety standards, and feature galvanic isolation, ESD protection, and circuit/port isolation. Despite these certifications, a high-severity vulnerability (CVE-2023-7237) with a CVSS 3.1 score of 7.5 (HIGH) was reported for the XPort Edge product in January 2024, indicating a notable safety incident. Lantronix aims to address vulnerabilities within 90 days of initial reporting and provides security advisories. The company follows the Common Vulnerability Scoring System (CVSS) for reporting potential impacts and discloses affected products and fixes. Lantronix is committed to protecting the confidentiality of vulnerability reports and adheres to data protection guidelines, with users having rights under GDPR. The xPico 250 IoT Gateway is used in a molecular diagnostic device for virus detection, which helps medical professionals save lives and complies with FDA’s Emergency Use Authorization. Lantronix solutions also reduce operational costs by eliminating or reducing on-site visits at hospitals for deployments and real-time troubleshooting, increasing operational efficiency for clinicians.

Fair Money & Economic Opportunity

Lantronix, Inc. is a technology company providing secure data access and management solutions for IoT and IT infrastructure, not a financial institution.

The company does not offer lending, deposit, or other consumer financial services. Therefore, all KPIs related to fair money and economic opportunity, such as underserved client share, pricing fairness, exploitative fee exposure, inclusion initiatives, data accessibility for financial data, fair lending compliance, wealth building outcomes, financial literacy initiatives, debt burden ratio, geographic inclusion for financial services, and product simplicity for financial products, are not applicable to its core business model. The company intends to retain future earnings for business expansion and general corporate purposes.

Fair Pay & Worker Respect

The company states that neither it nor its subsidiaries are party to any collective bargaining agreement, indicating 0% employee coverage.

Lantronix offers comprehensive medical, hospitalization, prescription drug, dental, and vision coverage, along with Flexible Spending Accounts, covering 90-95% of its workforce.

Honest & Fair Business

Lantronix has a formal whistleblower policy that allows confidential or anonymous reporting via a dedicated hotline.

Concerns can be communicated to the Audit Committee or General Counsel, and investigations are stated to be 'promptly investigated,' though no specific timeframe or details on independent investigation processes are provided. The company also has an anti-corruption policy that emphasizes compliance with the Foreign Corrupt Practices Act (FCPA) and US export rules, and states the policy is available on its website. However, there is no information on the frequency or effectiveness of training for this policy.

Kind to Animals

Lantronix, Inc. is a provider of secure data access and management solutions for IoT and IT infrastructure, offering embedded IoT modules, external device servers, network switches, and remote environment management solutions.

None of the provided articles contain specific, concrete data points or mentions of Lantronix, Inc. in relation to animal testing, animal-derived ingredients, animal agriculture, or habitat destruction. Therefore, all KPIs related to the 'Kind to Animals' value are omitted due to a lack of direct evidence for the company's activities in these areas.

No War, No Weapons

Lantronix develops and uses dual-use technology, including drones, sensors, AI platforms, simulation tools, and imaging systems.

Its Edge AI drives US Army-approved Black Widow™ drones, and its System on Module is used for military-grade gunshot detection adaptable for commercial use. The company states it does not have sufficient information to determine the country of origin of conflict minerals or the facilities used to process them for 2024, indicating 0% of its supply chain is certified conflict-free. Lantronix has a Conflict Minerals Policy and reports annually to the SEC on conflict minerals. If non-'DRC conflict free' 3TG metals are discovered, the company will attempt to work with suppliers to correct the situation or transition to alternatives. Lantronix expects its contract manufacturers to conduct similar inquiries and due diligence. The company is developing systems to avoid 3TG metals that finance armed groups in the DRC or adjoining countries. It is committed to complying with Section 1502 of the Dodd-Frank Act and SEC regulations regarding conflict minerals.

Planet-Friendly Business

No specific, quantitative evidence was found in the provided articles regarding Lantronix, Inc.'s own operational environmental performance across any of the Planet-Friendly Business KPIs. Information related to product compliance (e.g., RoHS, REACH, WEEE)

and the environmental benefits achieved by customers using Lantronix products (e.g., energy reduction at customer sites like Mouser Electronics or Hotel Marcel) does not apply to the company's own operational footprint for this value category, as per the rubric's definition and exclusion criteria. The articles do not provide data on the company's own emissions, renewable energy use, waste, water, or any other direct environmental impact metrics.

Safe & Smart Tech

Lantronix has a NIST-certified implementation of Advanced Encryption Standards (FIPS-197).

However, 48% of its device servers on Shodan are leaking Telnet passwords in plaintext, a vulnerability for which a Metasploit module has been available since 2012. The company states it adheres to data protection guidelines and mentions GDPR rights for EEA residents and California law for California residents, but has a history of a significant vulnerability in older products. Lantronix has a Vulnerability Disclosure Policy, aiming to investigate reported vulnerabilities within five business days and provide a determination within ten business days. It aims to address vulnerabilities within 90 days of initial reporting. Security advisories are posted on their website when a workaround or fix is determined.