Is this your company? Buyers are checking Luminsports here. Claim luminsports.com free to control the listing, earn the badge buyers trust, and see who's evaluating you.
Claim free
Luminsports
Trust level
Listed
Unverified
Listed
Domain
Report
Live
Sourced from public information. Not yet verified by the company.
Luminsports is SOC 2 Type I compliant. Luminsports also holds HIPAA.
About
Welcome to Lumin Sports' Trust Center. This Trust Center offers in-depth insights into our security practices, including the specific controls and policies implemented by our team. Here, you can explore our compliance standards, request access to comprehensive security documentation, and gain a clear understanding of how we protect your data.
Compliance & infrastructure
Hosting
AWSGCP
Data handled
Customer personally identifiable informationEmployee personally identifiable informationCredit card informationPersonal health information
Subprocessors
15- AAmazon Web Services · InfrastructureSydney, Australia
- GGoogle Cloud · Bot protection and mobile push notificationsGlobal
- OOpenAI · AI ProviderUnited States
- DDatadog · Cloud MonitoringUnited States
- AAbly · Realtime data
- FFeaturebase · Customer feedbackEurope
- HHubSpot · CRM & Marketing operationsAustralia
- iincident.io · Incident managementEurope
- IIntercom · Customer supportUnited States
- MMailgun Technologies, LLC · Transactional email deliveryUnited States
- MMixpanel · AnalyticsUnited States
- SSegment · AnalyticsUnited States
Show all 15 subprocessorsShow fewer
- SSentry · Application monitoringUnited States
- SStripe · Finance and paymentsGlobal
- XXero · Finance and paymentsUnited States
Compliance leadership
The person who leads Luminsports's SOC 2 isn't listed yet. Claim this profile to add it.
Penetration test
Unknown. Luminsports's penetration test vendor isn't listed yet.
Claim this profile to add it.
This listing is partial
6/11 details · 55%SOC2C shows the verified essentials. 5 details are not yet provided by the company. Trust centers list more, so we invite the owner to fill the gaps here.
- Auditorraises trustAdd the CPA firm that issued your SOC 2 so buyers can verify who signed it.
- Report dateraises trustAdd your most recent report period so buyers see how current your SOC 2 is.
- Renewal dateAdd your renewal window so buyers know your coverage is active.
- DocumentsList the documents you share (SOC 2 report, SOC 3, pen-test summary, DPA) and whether each is public or on request.
- Security controlsConfirm key controls (encryption, MFA/SSO, annual pen test, BCP/DR) buyers screen for.
Claim free to control your listing
Verify your work email to take ownership, earn the badge buyers trust, and add the details that win deals.
Frequently asked
Is Luminsports SOC 2 compliant?
Luminsports is SOC 2 Type I compliant. On SOC2C this listing is Listed.
Is Luminsports HIPAA compliant?
According to Luminsports's public trust center, Luminsports is HIPAA compliant. On SOC2C this listing is Listed.
Is Luminsports SOC 2 Type I or Type II?
Luminsports is SOC 2 Type I compliant. A Type II report covers how security controls operated over a period (typically 3 to 12 months), a stronger signal than a point-in-time Type I.
Can I use Luminsports's SOC 2 for a vendor risk assessment?
Yes. Luminsports's SOC 2 status, frameworks, auditor, and renewal timing are on SOC2C for vendor risk and security reviews. Request the underlying report through SOC2C to complete your third-party risk file.
Is Luminsports penetration tested?
Luminsports hasn't listed its penetration testing on SOC2C yet. SOC 2 Type II programs typically include periodic third-party penetration tests; the company can add who performed theirs.
Is Luminsports secure?
Security isn't a single yes/no, but Luminsports is SOC 2 Type I compliant and holds HIPAA, SOC 2 Type I. SOC2C verifies its compliance posture and shows how strongly each fact is proven.
Does Luminsports have a bug bounty or vulnerability disclosure program?
Luminsports hasn't listed a bug bounty or vulnerability disclosure program on SOC2C. Many companies accept security reports at security@luminsports.com or via a /security page (Luminsports lists a security contact).
Who are Luminsports's subprocessors?
Luminsports lists 15 subprocessors on its trust center, including Amazon Web Services, Google Cloud, OpenAI, Datadog, Ably. Buyers use this for fourth-party risk review.
Where does Luminsports host or store data?
Luminsports hosts on AWS, GCP, and handles Customer personally identifiable information, Employee personally identifiable information, Credit card information, Personal health information. Data residency details are on its trust center.
Where is Luminsports's trust center or security page?
Luminsports's trust center is at https://trust.luminsports.com. Its verified SOC 2 status, frameworks, and documents are summarized on its SOC2C profile.
How do I report a bug?
If you wish to report a bug, please get in touch with our support team on support@luminsports.com, or start a conversation using the in-app support widget.
How do I contact your security team?
You can email us at security@luminsports.com
How can I find your recent incidents and uptime?
We have a status page which we keep up to date for all operational incidents here: https://status.luminsports.com
Where can I find your privacy policy?
https://luminsports.com/privacy-policy
Where are your servers located?
Lumin Sports applications are hosted on Amazon Cloud Services, operating in the Sydney Australia region.
Do you encrypt data at rest?
All data is encrypted at rest using AWS KMS AES-256-GCM. In addition, sensitive information such as health-related information is encrypted with AES-256-CBC before being stored in the database.
What are your data-at-rest and data-in-transit encryption standards?
In-transit: TLS 1.2+, SHA-256, RSA 2048 for web server, application server and mobile application. At-rest: AWS KMS, AES-256-GCM for database, file storage and backups.
What support coverage do you provide?
Monday to Friday, 9am - 5pm Australian Central Time
Do you support Single Sign-On (SSO)?
Not currently.
Do you support SCIM?
No, we do not.
What is your guaranteed uptime or SLA for platform availability?
We guarantee an uptime of 99.9%, resulting in the following periods of allowed downtime/unavailability: - Daily: 1m 26s - Weekly: 10m 4.8s - Monthly: 43m 50s - Yearly: 8h 45m 57s
What is the data retention policy? How long is athlete data kept after they leave?
Lumin Sports retains customer data for up to 90 days after contract termination, after which it is deleted through automatic data deletion processes.
Sports peers that completed SOC 2
Field Day Inc
fieldday.com · United States · Sports
SOC 2 Type IIRenewal not public
Ease Live AS
easelive.tv · European Union · Sports
SOC 2 Type IIRenewal not public
BreakAway Data
breakawaydata.com · Sports
SOC 2 Type IIRenewal not public
Reboot Motion Inc
rebootmotion.com · Sports
SOC 2 Type IIRenewal not public