SOC 1 and 2

SOC 1 and 2 demonstrates the latest security and audit standards for data centers. This designation is especially important for companies that are publicly traded or governed by strict industry regulatory entities such as healthcare, government, or banking.

Independent auditors have reviewed Lunavi policies and procedures in order to verify the controls that mitigate risk and deliver high-performance services. The audit covers access (both physical and digital), change management processes, documentation, and client control considerations.

What is the difference between Type II and Type I?

Lunavi holds the Type II designation, which confirms that all of the Lunavi facilities capably operate with both design proficiency for internal controls and the operational effectiveness of this design for at least a 12-month time period. Type I only measures adequacy for a specific date in time and does not audit operational effectiveness.

Lunavi is SOC 1 and SOC 2 compliant across all facilities.

PCI, GLB, and SOX

Lunavi infrastructure and protocols qualify us for PCI, Gramm-Leach-Bliley (GLB), and Sarbanes-Oxley (SOX) compliance, but each individual deployment must meet additional requirements for these compliance standards. If your hosted environment will deal with sensitive financial information, let expert technicians help you craft a compliant deployment for any of these standards.

Canadian Controlled Goods Program

We are a registered member of the Controlled Goods Program, which is designed to help track and control sensitive goods within Canada. In the case of our products and services, the CGP applies to data storage and transfer. CGP certification attests to our stringent security and data handling processes.