Security, built in from day one.
Lumora works with your customer data, financial data, and internal tools. It’s built, tested, and audited with that responsibility in mind.
Access is explicit, never assumed
Every workspace is isolated. Role-based controls, scoped API keys, and SSO mean nobody gets access they weren’t given, and removing access takes effect immediately.
Encrypted end to end
AES-256 at rest, TLS 1.3 in transit, and credentials kept in an isolated vault. Each integration gets only the access an agent actually needs.
Every action on the record
Agent changes, runs, and approvals are written to a tamper-proof log with the data behind them. Retention is configurable, and the full log exports in one click.
Your data never trains AI models
Your data is never used to train our models or anyone else’s, and our AI providers are contractually prohibited from doing so. It’s in our DPA, not just on this page.
02
The details
What security teams ask us
Is Lumora SOC 2 compliant?
Yes. Lumora is SOC 2 Type II certified, and you can request the latest report from our security team.
How is our data encrypted?
Data is encrypted with AES-256 at rest and TLS 1.3 in transit, and credentials are stored in an isolated secrets vault.
Do you use our data to train AI models?
No. Your data is never used to train our models or any third-party model.
Who can access our workspace?
Only the people you invite, with role-based permissions. Our support team can access it only with your explicit, time-limited approval.
Is every action logged?
Yes. Every agent run, change, and approval is written to a tamper-proof audit log you can export anytime.
How do you handle vulnerabilities?
We run regular penetration tests and a responsible disclosure program, and we credit every valid report.
Give your team its time back.
Start your 14-day free trial. No credit card required, and most teams launch their first agent in under 10 minutes.
Lumora
The AI workspace that gives your team its time back.