Security & Trust

Enterprise-grade security, proven in production.
Last updated: January 22, 2026

Lumi is built for modern, distributed production at scale, where information needs to move quickly between teams while remaining clearly owned and controlled. Information is shared by default, with restriction applied deliberately when required. Security is not bolted on or enforced through friction. It is built into how Lumi operates, from infrastructure and project ownership to access control and data handling.

At a glance

Built on Microsoft Azure enterprise cloud infrastructure
Encryption by default in transit and at rest, with redundant backups
Your data stays yours - you are the Controller, Lumi is the Processor (GDPR)
No cross-customer data sharing
Your data is never used to train AI models
99.977% uptime in the previous 12 months

Built on trusted enterprise infrastructure
Your data. Always yours.
Encryption by default
Practical access control for real-world productions
Designed to reduce risk through better systems
How we practice security
Availability and resilience
AI-ready, with enterprise governance
Built for scale, proven in production
Security enquiries and documentation

Built on trusted enterprise infrastructure

Lumi is deployed on Microsoft Azure, a world leader in secure and compliant cloud platforms.

Lumi is deployed on Microsoft Azure and benefits from Azure’s enterprise-grade security, resilience, and compliance standards, including ISO 27001 and SOC 2, through Azure’s underlying infrastructure and controls.

All Lumi database environments are protected by independent layered security controls and continuous monitoring.

Why this matters

Enterprise-grade infrastructure and resilience from day one
Security controls applied consistently across environments
Continuous monitoring to reduce operational risk

Your data. Always yours.

You always retain full ownership of your data. In GDPR terms, you are the Controller and Lumi is the Processor.

Your data is never sold
Your data is processed only to deliver the Lumi service, including by trusted technology partners who support core functionality, under strict contractual and data-protection controls
Your data is never shared across customers
Your data is never used to train AI models

Your data can be returned on request, without penalty or lock-in.

Procurement-friendly summary: You own your data. It stays isolated to your organisation. It is not sold, not shared across customers, and not used for AI training.

Encryption by default

All data in Lumi is protected by encryption at all times.

Data is encrypted in transit, at rest, and across multiple redundant backups. This applies to documents, media, metadata, and structured production information.

Security travels with the work itself, not as separate files or email attachments.

What this means for you

Protection across common risk points - file transfer, storage, and backups
Reduced exposure caused by copying, forwarding, and re-sending files

Practical access control for real-world productions

Clear project ownership and administration
Simple, role-based access at the project level
Private vaults for sensitive or personal information
Centralised data with no file copying or forwarding
Access can be removed instantly as teams change

Information stays in one place, visible when it should be, and private when it needs to be.

Operational impact

Cleaner onboarding and offboarding as crews change
Less reliance on personal inboxes, drives, and file sharing links
Reduced risk of outdated copies circulating

Designed to reduce risk through better systems

Production works best when information flows cleanly and stays connected to the work itself.

Lumi replaces scattered emails, disconnected spreadsheets, and manual handovers with a single, shared source of truth. Information lives where the work happens, not in someone’s inbox or on a personal drive.

By eliminating duplication, outdated copies, and invisible handoffs, Lumi helps teams work with confidence and continuity.

This is security through design, not enforcement.

How we practice security

Security is built into Lumi’s operations and ongoing delivery. Alongside infrastructure controls, we maintain clear internal practices to support enterprise expectations.

Access governance: access is role-based and managed at the project level, with the ability to remove access instantly as teams change
Monitoring: layered controls and continuous monitoring help detect and reduce risk across environments
Operational discipline: planned maintenance windows and clear change management practices support stability
Enterprise support: SLAs and security documentation are available by arrangement for enterprise customers

If you require additional security documentation for procurement or vendor assessment, we can provide it on request.

Availability and resilience

Lumi is built to support live, high-pressure productions where downtime is not an option.

Proven high availability - 99.977% uptime in the previous 12 months
Planned maintenance windows
Designed for rolling handovers across teams and time zones

Service Level Agreements are available by arrangement for enterprise customers.

AI-ready, with enterprise governance

Lumi is architected to support AI-assisted workflows as the platform evolves. These capabilities are designed to work within each production’s data, helping teams reduce manual effort and surface relevant information when it matters.

AI in Lumi is intended to augment production teams by improving organisation, continuity, and insight, while keeping decision-making, ownership, and accountability firmly with people.

As the platform grows, AI will be applied deliberately to real production problems, not as automation for its own sake.