Compliance.
General Data Protection Regulation (GDPR)
For details on your data protection rights, see our Privacy Policy.
Payment Card Industry (PCI) Data Security Standards (DSS)
Compliant. Learn more.
California Consumer Privacy Act (CCPA)
Compliant. Learn more.
Google Security Assessment
Passed in September 2020. No significant vulnerabilities were discovered.
AWS Security Standards
PCI DSS v3.2.1
The Payment Card Industry Data Security Standard (PCI DSS) v3.2.1 is an information security standard for entities that store, process, and/or transmit cardholder data. This Security Hub standard automatically checks for your compliance readiness against a subset of PCI DSS requirements.
AWS Foundational Security Best Practices v1.0.0
The AWS Foundational Security Best Practices standard is a st of automated security checks that detect when AWS accounts and deployed resources do not align with security best practices. The standard is defined by AWS security experts. This curated set of controls helps improve your security posture in AWS, and covers AWS’s most popular and foundational services.
In-progress / coming soon
- SOC 2
- NIST 2
- FERPA 2
- ISO 27000
- HIPAA
Frequently Asked Questions
Do you host or store customer data in EU data centers?
Lumin does not currently host or store any customer data in EU centers. Some businesses requiring GDPR compliance may need to sign a copy of our Personal Data Policy.Do you have an EU Data Processing Addendum?
Yes, we’ve provided the latest version of the Lumin DPA for you to read or download here. Additional information regarding GDPR & Lumin can be found through the following links:How do I report a security vulnerability?
Our Site Reliability team rapidly investigates all reported security issues. If you believe you've discovered a bug in Lumin's security, please report this vulnerability here.
Learn more by reading our Report a Vulnerability page.How does Lumin communicate service outages?
We communicate any service impacting outages to our customers via our Status page.