We understand the value of your security.

At LumiQ, we understand that we are trusted with your organization’s data. We design our platform with rigorous safeguards to ensure your information remains secure, confidential, and private.

For more information, you can see our security details on our Trust Center.

SOC 2 Certified

LumiQ has successfully achieved SOC 2 Type II compliance, verifying that our security controls are properly designed and implemented.

If you’re a customer looking for a copy of our most recent report, request our documentation on our Trust Center.

Single Sign-On

To help organizations streamline user management and enforce internal access policies, LumiQ supports SSO integrations for select identity provider platforms.

Note: SSO is available for an additional fee, and depends on your organization's technical setup. Please reach out to your account manager to verify if your specific platform is supported.

Cloud Hosting & Data Residency

LumiQ’s infrastructure is built on Google Cloud Platform (GCP), leveraging Google’s world-class physical and logical security.

All of our production systems and customer data are hosted in secure GCP data centers located exclusively within the United States.

Data Security & Storage

We ensure your data is shielded both when it is moving and when it is stored.

All data sent between your devices and LumiQ servers is encrypted in transit using Transport Layer Security (TLS 1.2) for all API communications. Customer data, backups, and databases are encrypted at rest using Advanced Encryption Standard (AES).

Backups are taken daily, encrypted, and stored redundantly across multiple availability zones.

Company Security & Development Practices

LumiQ is proudly based in Canada. Our team operates securely across both Canada and the United States. Every employee completes regular security awareness training on phishing, data privacy, and safe handling procedures and must adhere to our corporate security policies designed to protect customer data. We have endpoint security and mobile device management implemented on all employee devices.

We have implemented appropriate internal access controls. Access to LumiQ’s production systems and backend databases is restricted with the principle of least privilege. Only a limited number of essential engineering personnel are granted access, and only to the extent necessary to maintain the platform.

Our engineering processes strictly align with SOC 2 Type II frameworks, ensuring that all modifications to software, data, and infrastructure are systematically authorized, tested, and peer-reviewed before reaching production. This rigorous approach enforces segregation of duties and generates a continuous, auditable trail to prove our security controls operate effectively over time.

If you have discovered a security or privacy issue that you believe we should know about, we would be eager to hear from you.