Trust & Security

Security built into
every layer.

We are committed to upholding the highest standards in security and privacy, ensuring your data is always safe and handled with care.

SOC 2 Type II Certified
Completed AICPA SOC 2 Type I & II audits. Full reports available under NDA.
End-to-End Encryption
AES-256-bit encryption at rest. TLS 1.2+ enforced for all data in transit.
Annual Penetration Testing
Rigorous annual third-party pen tests to keep our defenses current.

Platform Security

How we protect your data

Our commitment to security is embedded in every layer, from infrastructure to engineering practices to company culture.

Sensitive Data is Never Accessed

For tools like email, Slack DMs, and Drive, we only access metadata. The content of your messages and files is never accessed, stored, or used, strictly controlled by the OAuth permissions we request.

Secure Cloud Infrastructure

Hosted on Google Cloud Platform, complying with ISO/IEC 27001, SOC 1/2/3, and PCI DSS. A reliable, high-performance foundation built on global security standards.

Security-First Engineering

Security is a collective responsibility. All Lumopath employees complete a comprehensive annual security training program and adhere to best practices when handling customer data.

Continuous & Automated Scanning

We use Thoropass' automation platform to continuously monitor over 100 internal security controls, plus manual and automated vulnerability checks throughout our development lifecycle.

Transparency

Your data, your control

We believe in full transparency about how your data is handled. You decide who has access and how it's used.

Who Has Access to Your Data?
  • Your data is never shared with or sold to third parties.
  • Access is restricted to your own organization. You decide who sees what.
  • Select Lumopath team members may access data only for support or custom analyses you explicitly request.
Simple & Secure Permissions
  • Setup takes approximately 15 minutes.
  • All integrations use simple, secure OAuth permissions.
  • For Google Workspace, a single super admin grants permissions with the ability to select specific groups or OUs.

Compliance Dashboard

Visit our Trust Center

For a real-time view of our security controls and compliance status, visit our public security dashboard powered by Thoropass.

View Security Dashboard →