Information Security Statement

Risk-based safeguards

We use administrative, technical, and physical safeguards selected according to business needs, system architecture, information sensitivity, contractual requirements, and reasonably foreseeable risks.

Security practices may include

• Access controls, least privilege, authentication, and account lifecycle management.
• Encryption in transit and at rest where appropriate and supported.
• System updates, vulnerability management, endpoint safeguards, backups, and monitoring.
• Provider due diligence and contractual security requirements.
• Employee confidentiality, awareness, and incident reporting procedures.
• Business continuity, recovery planning, and incident response.
• Secure disposal and retention controls.

Shared responsibility

Security is shared among the Company, clients, users, hosting and cloud providers, software vendors, and other parties. Clients and users must protect credentials, configure services appropriately, maintain backups, control permissions, and promptly report suspicious activity.

Incident reporting

Report suspected vulnerabilities or security incidents to legal@lumexagloballlc.com. Do not exploit a suspected issue, access unrelated data, disrupt services, or publicly disclose details before coordinated remediation.

No absolute guarantee

No security program eliminates all risk. This statement describes general practices and is not a warranty, certification, or contractual security commitment. Contract-specific requirements must be documented separately.

Contact us

Questions about this policy may be directed to:

Review notice: This document is generated from configurable business information and is intended as a starting template. It is not legal advice and does not guarantee compliance with any law. Have qualified counsel review it before publication and whenever your practices or applicable laws change.