Security
Security is built into how Lumina Systems designs, operates, and protects its platform.
Lumina Systems takes the protection of customer and caller information seriously. We design our platform with security in mind and work to maintain commercially reasonable safeguards across our systems and operations.
Data Protection
Lumina uses commercially reasonable technical and organizational safeguards designed to protect information against unauthorized access, loss, misuse, alteration, or disclosure.
We do not claim specific encryption algorithms, certifications, or compliance standards (such as SOC 2, ISO 27001, HIPAA, or PCI) unless those certifications and controls have been formally implemented and verified.
Access Controls
Access to Lumina's systems and customer information is limited based on business and operational need. We work to ensure that access to sensitive systems and data is appropriately restricted.
We do not claim specific authentication technologies or access control mechanisms unless those controls are verified and currently in place.
Infrastructure & Third-Party Providers
Lumina relies on carefully selected third-party technology providers to operate portions of its platform, including AI and voice processing, telecommunications, hosting, automation, CRM, calendar, and messaging infrastructure.
Third-party providers may have their own security controls, certifications, and policies. Lumina works to select providers with appropriate security practices, but does not control or guarantee the security posture of third-party systems.
AI and Voice Data
AI voice interactions can involve audio, transcripts, caller information, appointment information, and AI-generated summaries. This data is processed to deliver the Services and may be stored in accordance with applicable retention practices.
Customers should avoid submitting highly sensitive personal, financial, medical, or regulated information through the Services unless the applicable Lumina service and agreement expressly permit such use.
Monitoring and Reliability
Lumina works to monitor the availability and reliability of its platform and to respond to operational issues in a timely manner. We do not guarantee 100% uptime or uninterrupted service.
Service availability may be affected by maintenance, third-party provider outages, telecommunications issues, or other factors outside Lumina's control.
Incident Response
Lumina maintains processes designed to identify, investigate, contain, and respond to security incidents. In the event of a security incident affecting customer data, we will work to notify affected customers in accordance with applicable legal requirements.
We do not claim specific regulatory breach-notification timelines unless those timelines have been legally verified for our specific circumstances and jurisdiction.
Customer Security Responsibilities
Security is a shared responsibility. Customers are responsible for:
- Protecting account credentials and access tokens
- Managing user access and permissions appropriately
- Configuring integrations securely and appropriately
- Keeping third-party accounts and API connections secure
- Providing accurate and current business information
- Following applicable privacy and security requirements
- Reviewing AI outputs for accuracy and appropriateness
- Reporting suspected security issues promptly
Responsible Use
Customers must not use Lumina for unlawful, fraudulent, malicious, or abusive activity. This includes unauthorized use of telecommunications systems, unlawful call recording, spam, harassment, or any activity that violates applicable law or Lumina's Terms of Service. Misuse of the platform may result in account suspension or termination.
Report a Security Concern
If you believe you have identified a security vulnerability or have a security concern related to Lumina's platform, please report it through our designated security contact. We take all security reports seriously and will investigate promptly.
Security Disclaimers
No online service can guarantee absolute security. Lumina does not represent that its platform is immune to every possible security threat, vulnerability, or attack. The security landscape evolves continuously, and despite our efforts, security incidents can occur. By using the Services, you acknowledge and accept this inherent risk.