Data protection / gdpr page — Luma

Cited by

Facts read from this source

• GDPR compliant Report an error

  “Luma is GDPR compliant. We take both data privacy and security seriously.”

• DPA available Report an error

  “Data Processing Addendum — luma.com/dpa”

• SOC 2 soc3 reports Report an error

  “SOC 2 Type II and SOC 3 reports, plus live compliance status — trust.luma.com”

• DPA scope laws Report an error

  “Our standard DPA is written for GDPR, UK GDPR, and CCPA. It doesn’t specifically address other privacy laws such as Brazil’s LGPD, Canada’s PIPEDA, or India’s DPDP Act”

• DPA transfer clauses Report an error

  “it doesn’t include country-specific transfer clauses like Brazil’s ANPD standard contractual clauses”

• Provider region Report an error

  “Luma data is hosted on AWS in the United States. We don’t offer data residency in other countries or regions.”

• Contracting entity Report an error

  “Luma Labs, Inc. is a US company and Luma data is hosted in the United States”

• Access from outside country Report an error

  “Luma team members and the service providers on our subprocessor list access your account, event, and attendee data from outside your country — primarily from the United States. We don’t publish a country-by-country list”

• Enterprise DPA law specific Report an error

  “DPA terms for a specific privacy law are part of Luma Enterprise. Contact enterprise@luma.com with your requirements.”

• Audit logs standard plans Report an error

  “Much of what a security review asks about is available without an Enterprise plan, including per-guest activity timelines, check-in and email delivery records, and self-serve data export and deletion.”

• Security questionnaires Report an error

  “We do not fill out any security questionnaires without a Luma Enterprise plan.”

• List available Report an error

  “Subprocessor list — luma.com/subprocessors”

• Security documentation Report an error

  “Security — luma.com/security”

• Security vulnerability faq Report an error

  “Wondering whether a publicly announced vulnerability, like one in PHP, affects Luma? See Security Vulnerability FAQ.”

Scores citing this record

• The Conference Organiser Attendee data & the customer relationship
• The Conference Organiser European sovereignty
• The Course Provider Attendee data & the customer relationship
• The Course Provider European sovereignty
• The Data Protection Officer Attendee data & the customer relationship
• The Data Protection Officer European sovereignty
• The Revenue Accountant Attendee data & the customer relationship
• The Revenue Accountant European sovereignty
• The Skeptic Attendee data & the customer relationship
• The Skeptic European sovereignty
• The Skeptic Pricing transparency
• The Venue Promoter Attendee data & the customer relationship
• The Venue Promoter European sovereignty