✦ Security & Compliance
Enterprise-grade
security and compliance.
Your candidate data, your organisation's reputation, and your legal exposure. All taken seriously. Independently audited, continuously tested, and built to defend.
Certified, independently audited.
ISO 27001
Certified information security management. Independently audited controls for data handling, access, and incident response.
UK GDPR / EU GDPR
Full compliance with UK and EU data protection regulations. Candidate data is processed only with lawful basis and clear consent.
Equality Act 2010
Bias checking built into every assessment by default. Compliant with the UK Equality Act 2010 and EU AI Act, with equivalent standards applied automatically for all other regions. Automated flagging of discriminatory language and patterns.
EU AI Act
Designed to meet the requirements of high-risk AI systems in recruitment: explainability, traceability, and human oversight.
ARTP Council Member
Helping set the standard for fairer hiring.
HireWithLumi is a founding member of the Association of RecTech Providers (ARTP), part of the Better Hiring Institute, and sits on its council. ARTP brings together more than 40 UK hiring technology providers to make hiring faster, fairer and safer, and works directly with government and regulators on the standards behind it.
Our role in ARTPA seat at the table
As a council member we help lead ARTP's decisions and shape the standards UK hiring technology is held to, rather than waiting to be told what they are.
A direct line to policy
ARTP works with the Home Office, DSIT, the Disclosure and Barring Service and the ICO on how hiring technology should work. What we learn there goes straight into Lumi.
Fairness, in practice
Our place on the council is a commitment to fairer hiring. It is why every assessment is explainable, bias checking is on by default, and people make the final call.
Practices we take seriously.
- 01
Data residency
UK and EU data residency options as standard. Enterprise customers can request custom residency arrangements.
- 02
Encryption
TLS 1.3 in transit. AES-256 at rest. Per-customer encryption keys for Enterprise deployments.
- 03
Access controls
SSO via SAML 2.0 or Microsoft Entra. Role-based access controls. Complete audit log of user actions.
- 04
Model training
Your candidate data is never used to train external AI models. Your data stays your data. Full stop.
- 05
Penetration testing
Annual third-party penetration tests. Continuous vulnerability scanning. Coordinated disclosure programme.
- 06
Incident response
24-hour breach notification commitment. Documented incident response plan. Regular internal drills.
Request the documentation.
Full compliance documentation is available for review during procurement and on an ongoing basis for customers.
See it on a real role. Then decide.
Book a walkthrough and we'll run Lumi on one of your live vacancies, on your own data. A ranked shortlist with full reasoning, bias checks, and written feedback for every applicant. You see exactly what it does, then your team decides, every time.
