Your clients’ data, handled carefully.
Lumina holds read access to your clients' marketing platforms, so we treat that access as the product's most sensitive surface. Here is exactly how it's protected — and what we haven't built yet.
What’s in place today.
Encrypted credentials
Every integration credential is encrypted at rest with AES-256-GCM before it touches the database. Traffic is TLS-encrypted end to end.
OAuth-first connections
You connect platforms by signing in with them. We receive scoped, revocable access tokens — never your Google, Meta or LinkedIn password.
Role-based access
Admin, editor and viewer roles per workspace. Client portal users see only their own client's data, never another client's.
Audit log
Account actions — connections, exports, deletions, permission changes — are recorded with actor, timestamp and IP, and viewable in-app.
Account protection
Passwords are hashed with bcrypt at cost 12 and never stored in readable form. Sensitive endpoints are rate-limited against brute force.
Least-data by default
We read the reporting metrics you connect and nothing else. No ad account is written to, and no campaign is ever modified by Lumina.
GDPR and your data
A DPA is available on request. You can export or request deletion of your workspace data at any time, and we action deletion within 30 days.
Responsible disclosure
Found a vulnerability? Email security@luminainsights.co and we'll acknowledge it within one business day.
What we haven’t done yet.
Plenty of tools imply certifications they don’t hold. We’d rather tell you where we actually are. If any of the below is a procurement requirement for you, talk to us — you’ll get a straight answer on timing rather than a badge.
- → SOC 2 Type II — we have not yet completed an audit. We'll publish it here when we do.
- → SAML / Okta single sign-on — planned; today we support email and Google sign-in.
- → Regional data residency — infrastructure currently runs in a single US region.
Available on request.
- → Data Processing Agreement (DPA)
- → Subprocessor list
- → Security overview for procurement questionnaires
- → Data deletion / export request
Email security@luminainsights.co and we’ll come back to you.
Questions from your security team? Ask us directly.
Connect your data. Pick a template. Add your branding. Hit send.