At Luminary Cloud, trust is the cornerstone of our relationship with customers. We are committed to providing a secure, reliable, and transparent platform to power your CAE and CFD needs. This Trust Center serves as a central hub for information on our security practices, compliance efforts, privacy safeguards, and operational resilience.
Here, you’ll find resources outlining how we protect your data, adhere to global standards like ISO 27001 and CSA CAIQ, and maintain compliance with frameworks such as ITAR and NIST 800-171. Our aim is to empower your success by ensuring that Luminary Cloud meets the highest levels of security, transparency, and dependability.
Explore the Trust Center to learn more about our ongoing efforts to keep your data safe and your business compliant.
Joby Aviation
Piper Aircraft
Mueller Co.
Trek Bicycle
FlightHouse Engineering
BC/DR
We have a business continuity plan in place to ensure that we can continue to operate in the event of a disaster.
Trust Center Updates
PHP2Shell (CVE-2026-109618, CVE-2026-109619) — No Impact to Luminary Cloud
On October 21, 2026, security researchers disclosed PHP2Shell, two critical memory-safety vulnerabilities in the core PHP engine (CVE-2026-109618 and CVE-2026-109619). Because the flaws are in the PHP engine itself rather than in any individual application, they affect nearly all PHP versions and can allow unauthenticated remote memory disclosure and remote code execution.
Luminary Cloud is not impacted. No customer data, customer environments, or production systems are affected.
We completed a review of our environment on the day of disclosure and confirmed:
- No production system runs PHP. The Luminary Cloud platform, its APIs, and all customer-facing services are not built on PHP and do not execute it.
- Our marketing website does not run PHP and is unaffected.
- No customer data was accessible through any affected component.
Our continuous cloud security monitoring identified a single internal development tool — used by one engineer, hosted on a non-public internal URL, not reachable from the internet, and containing no customer data. It sits entirely outside our production boundary. It has been updated to a patched PHP release as a matter of hygiene rather than because of any exposure.
No action is required by our customers. We will update this notice if anything material changes.
Questions about this notice can be directed to security@luminary.ai
Luminary Cloud Security Updates
Luminary has completed its annual security and privacy policy review. All policies have been reviewed and updated as of May 2026.
A Cookie Policy has been added and is now publicly available at legal.luminary.ai, alongside our Privacy Policy. Security policies are available to qualified parties under NDA through this trust center.
These updates reflect our continued alignment with ISO 27001:2022, AICPA SSAE 18 SOC 2, and ongoing compliance initiatives.
Luminary Cloud has successfully completed its first Service Organization Control 2 (SOC 2) Type 2 audit for its Physics AI SaaS Platform System. The organization worked with A-LIGN to perform an in-depth audit of our controls as they relate to security, availability, and confidentiality for the period January 1, 2025, to October 31, 2025.
Additionally, Luminary Cloud has successfully completed its first annual surveillance audit for ISO/IEC 27001:2022 certification. This audit verified the continued conformity of our Information Security Management System (ISMS) and concluded with zero nonconformities.
We're excited to announce that we've published updated versions of our security policies in our Trust Center. These revisions reflect our ongoing commitment to maintaining a robust security posture and ensuring the highest level of protection for your data.
These updates reinforce our dedication to:
- Proactive Security: Continuously adapting our defenses against emerging threats.
- Transparency: Providing clear and detailed information about our security measures.
- Data Protection: Upholding the privacy and integrity of the information you entrust to us.
We encourage you to review the updated policies and their revision histories to stay informed about our security commitments.
You can access all our security policies directly through our Trust Center.