Your data rooms stay yours
Data rooms hold commercially sensitive documents. Here’s how Lumen handles them.
How we handle your data
- Stored in the EU
Documents, extracted data, findings, reports and backups all sit in the AWS EU Region in Stockholm, Sweden.
- Encrypted throughout
AES-256 encryption for documents at rest, and TLS 1.2 or later in transit. The app is served over HTTPS only.
- Invite-only access
There’s no public sign-up. Each organisation sees only its own projects and documents, and sessions end after 24 hours without activity.
- AI that doesn’t train on your data
Lumen analyses documents with Anthropic’s Claude models. Anthropic doesn’t train on API data, and deletes inputs and outputs within 30 days. This is the one step that runs outside AWS, in the United States.
- Locked down
The database and document storage can’t be reached from the public internet, and download links expire after an hour.
- Backups and deletion
The database can be restored to any point in the last 7 days. Deleting a project removes its records and documents.
Every review can be traced
-
Cited to source
Every finding names the documents it came from, so anyone reviewing the project can check the evidence for themselves.
-
A full audit trail
Every comment, status change and piece of evidence added to the register is recorded, with who did it and when.
-
Versioned checks
The rules that review a project are versioned, so every review can be traced back to the checks that ran on it.
-
Certification
We’re working towards SOC 2 and ISO 27001.
Need a security questionnaire completed?
Send it to info@lumenduediligence.com and we’ll come back to you with answers.