Security

Data is encrypted in transit using TLS and at rest using industry-standard encryption, covering call recordings, transcripts, and scheduling data.

Luna runs on cloud infrastructure built for security and reliability, with network segmentation and least-privilege access between services.

Internal access to production systems and customer data is limited to personnel who need it, protected with multi-factor authentication, and reviewed on a regular schedule.

We monitor our systems for unusual activity and maintain audit logs of access to sensitive data to support incident investigation and compliance reviews.

Luna Health AI undergoes an independent SOC 2 Type II audit annually to validate the design and operating effectiveness of our security controls.

We maintain an incident response process to investigate, contain, and remediate security events, and to notify affected customers in line with our contractual and legal obligations.

If you believe you've found a security vulnerability in our systems, please report it to contact@lunahealthai.ca so our team can investigate promptly.

All personnel complete security and privacy training, and access to customer data is granted on a need-to-know basis and revoked promptly when no longer required.

For security questions or documentation requests, contact contact@lunahealthai.ca.