Your venue's data stays your venue's.
Every venue on Lumio is walled off by the database itself. Another venue can ask for your bookings by name and get nothing back. We test exactly that.
JJoyland
BBounce Town
We attack it ourselves,
on purpose.
The tests do not check that venues happen to stay apart. They make one venue deliberately ask for another's data, through every screen and every phone tool.
Isolation checks Passing
Another venue asks for your bookings, contacts and rooms by name. Every answer is empty, including the overnight jobs.
Door checks Passing
Every dashboard page refuses without a signed-in user. Every phone tool refuses without the right key.
Rows another venue can reach
The separation is enforced inside the database, on every table. Not by a filter someone could forget to write.
Safe because of what
it cannot do.
We assume someone will try to talk Ember into something. So Ember is only given tools that are harmless in the wrong hands.
Can
- Answer from your knowledge base
- Create a booking marked pending
- Save an enquiry for a call back
- Only in the venue that was called
Cannot
- Cancel or change a booking
- Delete anything
- Read other callers' details
- Set or discount a price
- Reach another venue
Every request is checked
on the way in.
Phone calls and staff use different doors with different keys. Behind both, the server works out which venue it is serving. It never takes the request's word for it.
The phone door
Ember's tools carry a secret key, checked in constant time.
The dashboard door
Your staff sign in. The venue is checked again on every request.
The server decides the venue
From the call or the signed-in account, never from what the request says. If anything is unclear, it refuses.
Every supplier,
named.
A call passes through a few specialist services. Each one only does its own part of the job.
What we have not done,
said plainly.
Lumio is young. These are on the list, and we would rather tell you than let a badge imply otherwise.
SOC 2
Not certified. We will start the readiness work before larger multi-site venues.
Single sign-on
Sign in with your company account, for groups with many staff.
Outside penetration test
Our own attack tests run today. An independent firm has not tested Lumio yet.
Card payments
When deposits arrive, they will go through a certified payment provider, never stored by us.
Data questions,
straight answers.
Anything else, write to hello@lumio.software.
Can I get my data out?+
Yes. Ask at any time and we export your bookings, contacts and call records for you.
Can you delete everything?+
Yes. Write to hello@lumio.software and we delete your venue's data.
Are calls recorded?+
Yes, and transcribed. Recording rules differ by state, so we add a spoken notice to your greeting whenever you ask.
Is Lumio SOC 2 certified?+
Not yet. It is on the list above.
Ready when your venue is.
Book a demo and we load your venue before we speak.