generated: '2026-07-24'
method: searched
probe: false
url: https://www.lumahealth.io/security-and-trust/
certifications:
- HITRUST CSF r2
- SOC 2 Type II
- ISO/IEC 27001:2022
- HIPAA
- TX-RAMP Level 2
compliance_program: >-
  Luma Health operates a dedicated in-house information security and compliance
  function with a fully documented set of policies, procedures, and controls that
  are independently audited by a third party no less than annually. All Luma
  software and company processes are stated to be fully HIPAA-compliant, and Luma
  signs Business Associate Agreements (BAAs) with covered-entity customers.
evidence:
- source: https://www.lumahealth.io/security-and-trust/
  keywords: [hitrust, soc 2 type ii, iso 27001, hipaa, tx-ramp, trust]
- source: https://www.lumahealth.io/newsroom/company-news/luma-health-elevates-its-security-practices-with-iso-iec-270012022-certification/
  keywords: [iso 27001:2022, hitrust r2, soc 2 type ii]
- source: https://www.prnewswire.com/news-releases/hitrust-r2-certification-validates-luma-healths-security-posture-301632696.html
  keywords: [hitrust r2, healthcare]