SOC2C

Is this your company? Buyers are checking Lumos App Inc here. Claim lumos.com free to control the listing, earn the badge buyers trust, and see who's evaluating you.

Claim free
Lumos App Inc logo

Lumos App Inc

lumos.com· United States· Security contact
Security overviewCompliancePenetration test
Trust level
Listed
Unverified

Sourced from public information. Not yet verified by the company.

Lumos App Inc is SOC 2 Type II compliant. Lumos App Inc also holds ISO 27001.

Request report accessClaim this profile
Framework
SOC 2 Type II
Auditor
Not publicAdd
Last report
—Add
Renewal
UnknownAdd
View official trust center ↗

About

Don’t let managing hundreds of apps and permissions slow down your business. Lumos is the first app governance platform that automates access requests, enforces least privilege, speeds up user access reviews, and eliminates extra SaaS app spending. Learn more at [lumos.com](http://lumos.com/). At Lumos, we treat security as a mindset, not a checklist. We have deep operational and cultural security practices powered by using Lumos at Lumos. These help us implement least-privilege access across the most important set of resources (including credentials) via Lumos access requests, Lumos user acce

Compliance & infrastructure

SOC 2 Type IIISO 27001
Hosting
AWS
Data handled
Employee personally identifiable informationCredit card informationPersonal health information

Documents

4
GENERAL
POLICIES
Documents

Subprocessors

13
  • A
    Amazon Web Services · Cloud infrastructure
    USA
  • D
    Datadog · Application monitoring
    USA
  • W
    WorkOS · Single Sign-On
    USA
  • S
    Salesforce · CRM
    USA
  • S
    Slack · Collaboration
    USA
  • O
    OpenAI · LLM
    USA
  • M
    Merge · Integrations
    USA
  • A
    Anthropic · LLM
    USA
  • L
    LangSmith · Engineering
    USA
  • S
    Snowflake · Data storage and processing
    USA
  • E
    Estuary · Data storage and processing
    USA
  • C
    Cube · Data storage and processing
    USA
Show all 13 subprocessors
  • P
    Pylon · Support
    USA

Compliance leadership

The person who leads Lumos App Inc's SOC 2 isn't listed yet. Claim this profile to add it.

Penetration test

Unknown. Lumos App Inc's penetration test vendor isn't listed yet.

Claim this profile to add it.

Recent updates

Lumos' Response to Salesloft Drift BreachSep 2025

Lumos has never utilized any Salesloft integration, including Drift. We are actively engaging with our vendors to assess any potential indirect impact through our supply chain.

Subprocessors UpdatedFeb 2024

We intend to begin using OpenAI as a subprocessor within the next month

Subprocessors UpdatedDec 2023

We have recently moved our list of subprocessors to our Trust Center. We will be sending out notifications through this "Updates" tab to notify customers of any changes to our subprocessors.

SOC 2 Type 2 UpdatedDec 2023

We have recently audited and completed a renewed SOC 2 Type 2. The revised SOC 2 Type 2 document is now available at Lumos' Trust Center here

This listing is partial

7/11 details · 64%

SOC2C shows the verified essentials. 4 details are not yet provided by the company. Trust centers list more, so we invite the owner to fill the gaps here.

  • Auditorraises trust
    Add the CPA firm that issued your SOC 2 so buyers can verify who signed it.
  • Report dateraises trust
    Add your most recent report period so buyers see how current your SOC 2 is.
  • Renewal date
    Add your renewal window so buyers know your coverage is active.
  • Security controls
    Confirm key controls (encryption, MFA/SSO, annual pen test, BCP/DR) buyers screen for.
Claim free to control your listing

Verify your work email to take ownership, earn the badge buyers trust, and add the details that win deals.

Frequently asked

Is Lumos App Inc SOC 2 compliant?
Lumos App Inc is SOC 2 Type II compliant. On SOC2C this listing is Listed.
Is Lumos App Inc ISO 27001 certified?
According to Lumos App Inc's public trust center, Lumos App Inc is ISO 27001 certified. On SOC2C this listing is Listed.
Is Lumos App Inc SOC 2 Type I or Type II?
Lumos App Inc is SOC 2 Type II compliant. A Type II report covers how security controls operated over a period (typically 3 to 12 months), a stronger signal than a point-in-time Type I.
Can I use Lumos App Inc's SOC 2 for a vendor risk assessment?
Yes. Lumos App Inc's SOC 2 status, frameworks, auditor, and renewal timing are on SOC2C for vendor risk and security reviews. Request the underlying report through SOC2C to complete your third-party risk file.
Is Lumos App Inc penetration tested?
Lumos App Inc hasn't listed its penetration testing on SOC2C yet. SOC 2 Type II programs typically include periodic third-party penetration tests; the company can add who performed theirs.

Answers published by Lumos App Inc

Reproduced from Lumos App Inc's own trust center. These are the company's statements about its security practices — SOC2C has not tested or verified them, and they may have changed since we last read the page. Check the source ↗

When we integrate Lumos with our other SaaS tools, what scopes are needed?
Lumos starts off as a blank slate that customers expand as they integrate more third-party apps. The more integrations added, the more functionality a customer unlocks. How much they want to integrate is always within their control. Integrations vary in their scope and purpose. This article provides further detail describing what scopes are needed to use Lumos.
Where is your Privacy Policy?
https://www.lumos.com/privacy
Where is your Vulnerability Disclosure Policy?
The details of our coordinated disclosure policy can be found at lumos.com/disclosure Our security.txt Contact: mailto:disclosure@lumos.com Expires: 2025-01-01T05:59:00.000Z Preferred-Languages: en, es Canonical: https://www.lumos.com/security.txt Policy: https://www.lumos.com/disclosure Hiring: https://boards.greenhouse.io/lumos/jobs/5672646003 Our PGP key: -----BEGIN PGP PUBLIC KEY BLOCK----- Version: Keybase OpenPGP v1.0.0 Comment: https://keybase.io/crypto xsFNBGUcNB0BEADKMpESDxDLh9RBoxzOr9pQQP16u+P/r+QLsyYrHagC102z6kZy 8BmuMaCDP/FWjJNYsLTbQ+FLbq3fI7RW4Gz5MM1Bxuq/n4JJNTUpqOynAPMNBoHV Yn0stqs1jFpwTR2v6bgsI1v2vCkE4d5kau7hp9tARuKM+dtGZfvyYoHnIGq1IEpS da42a/SiRcFxcR+b7cSQQGFdRAc6nKWhUu8R+6yCt+h2TWY/M7A8yL5EFr1DXye9 F5PPi9G63vui4+FvRduNycObSuyN9GwwNNmvZoUzwTU9jJ7y+s1feJPoBD2yD0XP C/vwHIUie+dy4o5ZvV1hfMsgbR+ii92OhfqOLFJwAw0IrJvw38sXQjp/uYrNDzv9 hRN8RUNIVtk9YhDnJCwW/EEK3PooXZKYh6OzxjNX+Oglcj4G3XjchRcvksoqoaXk PtpWrMdQkADMG8rrn+OxiIwKCkdvPS/+coCaTJ0Lk5GLPyUC7C6EAgwqgEEi6R2s m3dBJ4LVa0orC9hrHCRCrk1hqD1UfpWM3cFnlXoVhsZC3Y53TyI59QkZKUe0bJ1i zt38R5cInVjbHBoljUSZTEvjdE2sanaD5BwR5xkBpizfaui2a3Ve9Xrl4S5NhDBF sMgYhSx2QQDcRUcqWPeStdw0LtcgJOZjWXSj0gnS4ddeFiEUIyLG97OarwARAQAB zTNMdW1vcyBDb29yZGluYXRlZCBEaXNjbG9zdXJlIDxkaXNjbG9zdXJlQGx1bW9z LmNvbT7CwW0EEwEKABcFAmUcNB0CGy8DCwkHAxUKCAIeAQIXgAAKCRBebhNOlppe N1l1EACFu86BD0IpXDYiKZUWYrcK2VEY1G51tL4sEyLcrNuCe+Aud8lf1FFAqoSE X5lSS85diQNyp7CI8X3eiBvjqLxVvrM5tkwrml263tF6lnwzueQcYpdtI3R2nAL0 d37FZ72j5xdyLaqc/c6iel3sf/ZL/WBL49u6RVwI+DQhA/Ld+dSGe4/W7NcHqyLj 4gQdwBmdJH0NArgH1J6kr3qJP4O5OJserZK2hIEYOrak6IGaSA0IBvaSKCSi7AsQ Bze2AzkMw7LC0wTq2J1Us8ah9VzCZkNZzTcVtwJh8NQRpsTdcRuj11Pd1Suk0rHU fOq9GoXeKpoyOPgmMqa01i7CXJzV40xYAl0PFUo5igj+mM/SLQeYWy1ByqWwjKbP OkXSsgazhK7lYfyrC1YGlFjpmAsBsI9C4vikefVVnmU3thssRcH9xRaYVZ1kyJGv 6VSzHlHXGZyUQsaSgTsdylHZrCDrg4x5QKdTMR6Xee7dF/+Nig79+Z8PConOS2l2 WuJsjAXaTa5MvOlIX/vGJvHStWoJbhaoGJa1Il+vAfheiEj7R8P5i+WSIOHEpbUy PcUygLPChZbJc40Twg/eM3d5cLFKJFno/mjuRPgsUPissBXEYM9s54AZvjOU/iGG…

Technology peers that completed SOC 2

Compare vs Action1Compare vs ELJUN LLCCompare vs equipifi
Action1 logo

Action1

action1.com · United States · Technology
Listed
SOC 2 Type IIRenewal not public
ELJUN LLC logo

ELJUN LLC

eljunllc.com · United States · Technology
Listed
SOC 2 Type IIRenewal not public
equipifi logo

equipifi

equipifi.com · United States · Technology
Listed
SOC 2 Type IIRenewal not public
IntelligentSystems Corp logo

IntelligentSystems Corp

hyperbound.ai · United States · Technology
Listed
SOC 2 Type IRenewal not public