Security, AI controls & deployment — found from sitemap — Lucidspark

Cited by

Facts read from this source

• Updated Report an error

  “June 23, 2026”

• MFA internal Report an error

  “Lucid has implemented and maintains a multi-factor authentication method required for access to applications and systems containing Customer Data.”

• Background checks Report an error

  “Lucid performs standard background checks, including criminal records checks, for all employees prior to their employment and access to Customer Data.”

• Least privilege Report an error

  “Personnel accounts privileges are allocated on a “least privilege” basis.”

• Access review frequency Report an error

  “Personnel access to systems that store or process Customer Data are reviewed on at least a quarterly basis.”

• Log retention Report an error

  “Logs are archived for a minimum of 180 days. Logs for all applications, systems, or infrastructure that supports, processes, or stores confidential or higher data are archived for at least one year.”

• Intrusion detection airfocus exception Report an error

  “Except with respect to its airfocus Subscription Service, Lucid implements and maintains an intrusion detection monitoring process at the network and/or host level to detect unwanted or hostile network traffic.”

• Data segmentation Report an error

  “Lucid implements technical controls to properly segment Customer Data from data belonging to Lucid’s other customers.”

• Sdlc Report an error

  “All new code is peer-reviewed and undergoes quality assurance and regression testing as appropriate prior to being introduced into production. Lucid logically or physically separates environments for development, testing, and production.”

• Password admin controls airfocus exception Report an error

  “Lucid provides account administrators the ability to set password security requirements, which include password complexity requirements, the number of failed attempts before account lockout, lockout duration, password reset frequency, and password reuse, for all products except the airfocus Subscription Service.”

• Encryption Report an error

  “Lucid encrypts Customer Data while at rest, when writing to removable devices, and while in transit.”

• Disk encryption Report an error

  “Lucid has implemented industry standard disk-level encryption on all machines that store or otherwise process Customer Data.”

• Incident response plan Report an error

  “Lucid maintains an incident response plan to promptly review, address, and mitigate any Security Breaches of which Lucid becomes aware from an independent third-party, Customer, or through Lucid’s own discovery.”

• Vendor assessment Report an error

  “Prior to engaging new third-party service providers and vendors that will have access to Customer Data, Lucid conducts a risk assessment of the data security practices of each third-party.”

• Pentest Report an error

  “At least once every year, Lucid undertakes an application penetration test by an independent third-party. Lucid remediates all critical and high vulnerabilities identified in the penetration test within 30 days of the date of identification.”

• Certifications Report an error

  “Lucid engages in security audits on an annual basis and Lucid’s security practices align with the principles of ISO 27001. Upon request, Lucid will provide a copy of its then most recent third-party audits or certifications, as applicable, or any summaries thereof.”

• Vulnerability scanning Report an error

  “Internal scans are performed at least monthly. External scans are performed at least quarterly, utilizing a Payment Card Industry Security Standards Council Approved Scanning Vendor.”

• Backups Report an error

  “Lucid backs-up its production databases according to a defined schedule. Backup data is securely stored in a different availability zone from primary production systems”

• Disaster recovery plan Report an error

  “Lucid maintains a disaster recovery plan that is consistent with industry standards. Regular testing of the disaster recovery plan is conducted to maintain its continued effectiveness.”

• Business continuity rto Report an error

  “This plan includes procedures to be followed in the event of an actual or potential business interruption and has a stated goal of resumption of routine services within 48 hours of such event.”

• Training Report an error

  “Lucid provides annual security awareness and privacy and confidentiality training to all personnel who process or may have access to Customer Data.”

• Data classification Report an error

  “All Customer Data is classified as "Confidential Information" and will be handled according to Lucid's Data Classification and Access policies. Customer Data is not replicated to testing environments without explicit written consent.”

• Airfocus acquisition Report an error

  “We have updated our Security Program to account for our recent acquisition of airfocus GmbH.”

• Malware protection Report an error

  “Lucid implements appropriate anti-virus/anti-malware detection software across all information systems processing Customer Data in its organization that are determined to be at risk, and where an acceptable solution is available, in accordance with NIST 800-83.”

• Storage media disposal Report an error

  “Lucid will securely erase or destroy any storage media within its control (whether magnetic, optical, non-volatile solid state, paper, or otherwise capable of retaining information) that captures Customer Data before repurposing or disposal according to the NIST 800-88 guidelines.”

• Key management Report an error

  “Lucid implements key management procedures that include the secure generation, distribution, activation, storage, recovery, and replacement/update of cryptographic keys.”

• Support emails Report an error

  “please contact support@lucid.co or support@airfocus.com for additional information.”

• Entity Report an error

  “© 2026 Lucid Software Inc.”

2 facts read from this page are not shown because they could not be confirmed on the page as captured.

Scores citing this record

• The Microsoft 365 Admin Sharing, permissions & administration
• The Microsoft 365 Admin Security, AI controls & deployment
• The Microsoft 365 Admin European sovereignty
• The Product Team Lead Sharing, permissions & administration
• The Product Team Lead Security, AI controls & deployment
• The Public-Sector Project Lead Security, AI controls & deployment
• The Public-Sector Project Lead European sovereignty
• The Skeptic Security, AI controls & deployment
• The Skeptic European sovereignty
• The Works Council Member Sharing, permissions & administration
• The Works Council Member Security, AI controls & deployment
• The Works Council Member European sovereignty
• The Workshop Facilitator Security, AI controls & deployment
• The Workshop Facilitator European sovereignty