LumenBetaGlobal Sourcing
Security

Built to keep your shipments and paperwork safe.

Your documents, rates and client details stay in your account, protected at every step, and nothing happens without your team's say-so.

You stay in control

Lumen reads your paperwork and prepares the shipment, PO match and charges for you. Nothing is created until someone on your team approves it, and every approval is recorded.

One record, fewer copies

Instead of spreadsheets and attachments emailed around, everyone works from one shared record. Fewer copies means fewer mistakes and fewer places for data to leak.

Your clients see only their own cargo

Each company's data is kept separate. A client's tracking link shows their shipment and nothing else.

Protected in transit

Every page, upload and tracking link runs over HTTPS. Admin access is restricted and needs two-factor sign-in.

Backed up every day

Automatic daily backups, with restores tested, so your records are safe if anything goes wrong.

Monitored continuously

We watch the platform and get alerted to problems, so issues are fixed fast.

Where your data lives

Hosted in the United States

Lumen runs on DigitalOcean servers in New York. Your documents, the data read from them and your records are stored there, and every connection to them uses HTTPS.

Outside services

Who else handles your data

Four services help us run Lumen. Each one only gets what it needs to do its job.

ServiceWhat it does for LumenWhere
DigitalOceanHosting: the application servers, the database, uploaded documents and backupsUnited States (New York)
AnthropicReading uploaded documents, and the product’s other AI features, through its commercial APIUnited States
ResendSending email from the app, and receiving documents forwarded to your Lumen addressUnited States
StripeSubscriptions, invoices and payments. Card details are entered with Stripe, not with usUnited States

The full terms, including how we tell you before adding a service, are in our Data Processing Addendum.

AI and your documents

Not used to train AI models

Documents are read by Anthropic’s AI through its commercial API, and the fields come back to your account for review. We don’t use your documents to train AI models, and our AI provider doesn’t train on API data under its commercial terms.

How long we keep it

Kept while your account is open

Documents and the data read from them stay in your account while it is open. Nothing is deleted on a timer, so your records are there when you need them. You can delete a document from a shipment at any time, and when you ask us to delete your account we remove your company’s data. Database backups roll over after 14 days.

Certifications

SOC 2

Lumen is not SOC 2 certified. If your team has a security questionnaire, send it to us and we’ll answer it in writing.

Your rights

The paperwork, in plain words

Our Data Processing Addendum sets out what we do with personal data in your documents, and the Privacy Policy covers everything else.

Spotted a security concern? Email hello@lumenglobalsourcing.com and we’ll reply within two business days.