Security & Compliance

Last updated: June 25, 2026

Security Overview

Luris.ai maintains enterprise-grade security to protect your sensitive legal data. Our comprehensive security program is designed to meet and exceed the stringent requirements of law firms and legal departments.

Certifications & Attestations

SOC 2 Type II

Active

Annual audit covering Security, Availability, Processing Integrity, Confidentiality, and Privacy

ISO 27001

Active

Information Security Management System certification

GDPR Compliant

Active

Full compliance with EU General Data Protection Regulation

CCPA Compliant

Active

California Consumer Privacy Act compliance

Technical Security Measures

Encryption

  • AES-256 encryption at rest for all data
  • TLS 1.3 encryption in transit
  • End-to-end encryption for sensitive communications
  • Hardware Security Module (HSM) for key management

Access Control

  • Multi-factor authentication (MFA) required
  • Single Sign-On (SSO) support via SAML 2.0
  • Role-based access control (RBAC)
  • Zero-trust security model
  • Session management and automatic timeouts

Infrastructure Security

  • AWS infrastructure with multiple availability zones
  • 24/7 security monitoring and intrusion detection
  • DDoS protection and Web Application Firewall (WAF)
  • Regular penetration testing by third parties
  • Automated security scanning and vulnerability management

Data Protection & Privacy

Data Residency

All data is stored in SOC 2 certified data centers within your selected region. We support US, EU, UK, Canada, and Australia regions.

Data Isolation

Complete logical separation of customer data with dedicated encryption keys per account.

Backup & Recovery

Automated daily backups with point-in-time recovery. 99.99% uptime SLA with geographic redundancy.

Data Retention

Configurable retention policies with automated deletion. Secure data purging upon account termination.

Operational Security

Employee Security

  • Background checks for all employees
  • Annual security training requirements
  • Strict NDAs and confidentiality agreements
  • Principle of least privilege access

Incident Response

  • 24/7 Security Operations Center (SOC)
  • Documented incident response procedures
  • Breach notification within 72 hours
  • Regular incident response drills

Vendor Management

  • Security assessment of all vendors
  • Contractual security requirements
  • Regular vendor audits
  • Limited sub-processor usage

Business Continuity

  • Comprehensive disaster recovery plan
  • Regular DR testing and validation
  • RTO of 4 hours, RPO of 1 hour
  • $10M cyber insurance coverage

Compliance Features

Audit Logging

Comprehensive audit trails of all user activities, data access, and system changes

Legal Hold

Preservation capabilities for litigation and regulatory requirements

Data Export

Full data portability with standard formats for easy migration

Compliance Reporting

Built-in reports for regulatory compliance and audits

Security Contact

For security inquiries, vulnerability reports, or compliance documentation:

  • Email: security@luris.ai
  • Security Portal: security.luris.ai
  • Bug Bounty Program: Available for security researchers
Return Home