Security

Compliance, reversibility and documents

Last updated · October 7, 2026

Frameworks we run against, export of your data at any time, and the documents available under NDA.

Lutril runs its security programme against the SOC 2 Type II trust services criteria and the ISO 27001 controls. Not certified against either to date. OVHcloud, the hosting provider, is certified against both.
Reversibility: export your data as CSV or PDF from the application at any time.
A data processing agreement under article 28 of the GDPR is signed before any real data enters the platform.
Available under NDA: the penetration test reports, the full data processing agreement with its technical and organisational annex, the architecture and data flow description, and the incident response procedure.
Security questions go to security@lutril.com, data protection questions to privacy@lutril.com.

Security

Last updated · October 7, 2026

Frameworks we run against, export of your data at any time, and the documents available under NDA.

Lutril runs its security programme against the SOC 2 Type II trust services criteria and the ISO 27001 controls. Not certified against either to date. OVHcloud, the hosting provider, is certified against both.
Reversibility: export your data as CSV or PDF from the application at any time.
A data processing agreement under article 28 of the GDPR is signed before any real data enters the platform.
Available under NDA: the penetration test reports, the full data processing agreement with its technical and organisational annex, the architecture and data flow description, and the incident response procedure.
Security questions go to security@lutril.com, data protection questions to privacy@lutril.com.