Lumiio Announces SOC 2 Type 2 Attestation Report

Calgary, AB – August 18, 2023 — Lumiio is proud to announce the achievement of a successful System and Organization Controls (SOC) 2 Type 2 audit, performed by Sensiba LLP. The SOC 2 Type 2 attestation assessed the company’s security, availability, and confidentially over a one-year period, without any exceptions noted. This announcement also follows the realization of a clean SOC 2 Type 1 report in November of 2021, demonstrating Lumiio’s continued commitment to cybersecurity and safeguards for both our organization and data registry platform. 

As a company dealing primarily with personal data collection and storage, Lumiio understands the significance of providing highly secured platforms to instill trust for the patients, stakeholders and team members alike. Successful SOC 2 reports demonstrate a thorough review of cyber security controls and their operating effectiveness. 

“This is an important milestone not only for Lumiio, but also for everyone one who works and trust us with important and often personal data,” said Lumiio CEO Blaine Penny. “The achievement of a completely clean SOC 2 report is a testament to our continued commitment to the highest standards of cybersecurity and confidentiality.” 

Lumiio has worked closely with Drata and Sensiba throughout the SOC 2 process. Lumiio utilized the Drata automated platform to continuously monitor compliance and security throughout the many digital projects run by Lumiio.  

Click here to read our previous SOC 2 announcement, and see below information to get in touch and learn more.  


Lumiio is a global digital health company that specializes in real-world data collection services that drive health outcomes. Lumiio connects stakeholders in health communities by aligning interests and working towards the common goal of improving solutions for diagnostics, treatment, and care. At Lumiio, the social science leads the data science by combining classical research methods with innovative technologies and digital strategies. Lumiio does not own the data generated by their programs and take a ‘people first’ approach to instill trust in all stakeholders involved in the collection of data and delivery of new treatments. 

For more about Lumiio visit 

Contact: Ryan Wallace, Manager Marketing & Communications