Luminance

Pros

• +Independently certified ISO 27001 information security management system covering development, operation, sales and support, plus regular SOC 2 Type II examinations for security, availability and confidentiality
• +AES-256 encryption at rest using AWS Key Management Service and TLS 1.2 or higher in transit, with regular independent third-party penetration testing of application and operational systems
• +Admin-configurable role-based access, multi-factor authentication, single sign-on and audit logging, with control over which users see which information
• +States that customer-specific learning remains private to each organisation and is not shared across customers
• +Auto Mark-Up produces tracked-change redlines inside Microsoft Word against preferred positions, and shows the precedent for the clause being negotiated including where similar clauses were previously signed off

Cons

• −No pricing published; luminance.com/pricing returns 404 and the only calls to action on the homepage and negotiate page are 'Request a Demo' and 'GET STARTED'
• −The security page names AWS but no hosting region, and the published Master Agreement (clause 10.1.4) fixes data location to whatever the Product Order Form specifies, so residency is contractual rather than a published option
• −The security page does not state whether customer data is used to train models — only that 'Customer-specific learning remains private to each organization and is not shared across customers'
• −No jurisdiction or language coverage is published, and DocuSign, LexisNexis, Outlook and Word appear as logos on the negotiate page with no description of what each integration does
• −Several security-page FAQ answers, including 'What certifications and audits does Luminance hold?' and 'How is customer data hosted?', are collapsed and their content is not in the page text