generated: '2026-08-04'
method: searched
probe: false
url: https://lukka.tech/trust-center/
certifications:
- SOC 1 Type II
- SOC 2 Type II
- ISO/IEC 27001
details:
- certification: SOC 1 Type II
  scope: Controls at a Service Organization Relevant to User Entities' Internal Control over Financial Reporting
  cadence: annual, 12-month coverage period
  bridge_letters: true
- certification: SOC 2 Type II
  scope: Security, Availability, Processing Integrity, Confidentiality and Privacy
  cadence: annual, 12-month coverage period
  bridge_letters: true
- certification: ISO/IEC 27001
  certification_body: British Standards Institution (BSI)
  scope: Information security management system
infrastructure: AWS, multiple global regions
gaps:
- No sub-processor list published on the trust center page.
- No security whitepaper link published on the trust center page.
- No security contact or disclosure policy on the trust center page - the only published security contact is in the Claude
  plugin repository (see security/lukka-vulnerability-disclosure.yml).
evidence:
- source: https://lukka.tech/trust-center/
  http_status: 200
  fetched: '2026-08-04'
  keywords:
  - soc 1 type ii
  - soc 2 type ii
  - iso/iec 27001
  - bsi
  - trust center