Question 1

Is Luminous Corporation SOC 2 compliant?

Accepted Answer

Luminous Corporation is SOC 2 Type II compliant. On SOC2C this listing is Listed.

Question 2

Is Luminous Corporation SOC 3 compliant?

Accepted Answer

According to Luminous Corporation's public trust center, Luminous Corporation is SOC 3 compliant. On SOC2C this listing is Listed.

Question 3

Is Luminous Corporation CCPA compliant?

Accepted Answer

According to Luminous Corporation's public trust center, Luminous Corporation is CCPA compliant. On SOC2C this listing is Listed.

Question 4

Is Luminous Corporation SOC 2 Type I or Type II?

Accepted Answer

Luminous Corporation is SOC 2 Type II compliant. A Type II report covers how security controls operated over a period (typically 3 to 12 months), a stronger signal than a point-in-time Type I.

Question 5

Can I use Luminous Corporation's SOC 2 for a vendor risk assessment?

Accepted Answer

Yes. Luminous Corporation's SOC 2 status, frameworks, auditor, and renewal timing are on SOC2C for vendor risk and security reviews. Request the underlying report through SOC2C to complete your third-party risk file.

Question 6

Is Luminous Corporation penetration tested?

Accepted Answer

Luminous Corporation hasn't listed its penetration testing on SOC2C yet. SOC 2 Type II programs typically include periodic third-party penetration tests; the company can add who performed theirs.

Question 7

Is Luminous Corporation secure?

Accepted Answer

Security isn't a single yes/no, but Luminous Corporation is SOC 2 Type II compliant and holds SOC 2 Type II, SOC 3, CCPA. SOC2C verifies its compliance posture and shows how strongly each fact is proven.

Question 8

Does Luminous Corporation have a bug bounty or vulnerability disclosure program?

Accepted Answer

Luminous Corporation hasn't listed a bug bounty or vulnerability disclosure program on SOC2C. Many companies accept security reports at security@communityboss.com or via a /security page (Luminous Corporation lists a security contact).

Question 9

Who are Luminous Corporation's subprocessors?

Accepted Answer

Luminous Corporation's subprocessors aren't listed on SOC2C yet. The company can add them so buyers can assess fourth-party risk.

Question 10

Where does Luminous Corporation host or store data?

Accepted Answer

Luminous Corporation's hosting and data-residency details aren't listed on SOC2C yet. The company can add where it hosts (AWS, GCP, Azure) and which data it handles.

Question 11

Where is Luminous Corporation's trust center or security page?

Accepted Answer

Luminous Corporation's trust center is at https://trust.communityboss.com. Its verified SOC 2 status, frameworks, and documents are summarized on its SOC2C profile.

Question 12

Do you have a SOC 2 report?

Accepted Answer

Yes — we maintain a SOC 2 Type 2 report for the Security Trust Services Criteria, validated by an independent third-party auditor.

Question 13

Do you have a SOC 3 report?

Accepted Answer

Yes — our SOC 3 report is a public summary of our SOC 2 audit and is available in the Resources section.

Question 14

Which Trust Services Criteria are in scope for your SOC 2?

Accepted Answer

Our SOC 2 covers the Security TSC.

Question 15

How do you secure customer data?

Accepted Answer

Customer data is encrypted in transit and at rest. We enforce MFA for remote access and follow strict access control and monitoring procedures.

Question 16

Do you conduct penetration testing?

Accepted Answer

Yes — we engage an independent third party to perform annual penetration tests, and we remediate any findings promptly.

Question 17

How do you manage vendor risk?

Accepted Answer

We evaluate and monitor third-party vendors through a formal vendor risk management program.

Question 18

Do you have an incident response process?

Accepted Answer

Yes — we maintain a documented incident response plan, test it regularly, and notify customers promptly if their data is affected.

Question 19

Can I request your SOC 2 Type 2 report?

Accepted Answer

Yes — the SOC 2 Type 2 report can be requested through our Trust Center (requires NDA).

Question 20

Where can I download your SOC 3 report?

Accepted Answer

Our SOC 3 report is publicly available in the Resources section.

Question 21

Do you comply with U.S. state privacy laws (like CCPA/CPRA)?

Accepted Answer

Yes — we align with major U.S. data privacy regulations, including CCPA/CPRA, CPA, CTDPA, VCDPA, and others.

Luminous Corporation

About

Compliance & infrastructure

Compliance leadership

Penetration test

This listing is partial

Frequently asked