LaundryOS by Luminar
Contact sales Get Started →
TRUST & SECURITY

Security and trust, built in.

LaundryOS runs the whole laundry on one platform, so protecting your data is core to how we build. Here's how we keep it safe — in plain terms.

Encryption everywhere

Traffic is encrypted in transit over TLS/HTTPS, and data stored in the platform is encrypted at rest.

Access control & audit

Granular role-based permissions and audit trails on every record are built into the platform — not bolted on.

Backups & recovery

Automated backups with point-in-time recovery, so your data is never a single point of failure.

Tenant isolation

Each site runs on its own isolated database, keeping every customer's data cleanly separated.

You own your data

Your data is yours. Export it at any time, and we return or delete it on offboarding.

AI privacy

Cortex works on your data to help your team — we never use your data to train AI models.

Built on trusted infrastructure

LaundryOS is hosted on enterprise cloud infrastructure that is independently certified to SOC 2 Type II and ISO 27001. Network controls, security patching and physical data-centre security are handled at that layer, so your platform sits on a hardened foundation.

Compliance status

We believe in being straight about where we are. Here's our current posture:

  • Australian Privacy Principles Aligned We handle personal information in accordance with the Australian Privacy Act 1988 and the APPs.
  • GDPR Aligned GDPR-aligned data processing. A Data Processing Agreement (DPA) is available on request.
  • SOC 2 On our roadmap Built to align with SOC 2 controls; an independent examination is planned as we scale.
  • ISO 27001 On our roadmap Aligned to ISO 27001 controls; certification is on our roadmap.

How we handle your data

  • Ownership — your data is yours; we act as a processor on your behalf.
  • Residency — we host in a defined region and can discuss residency requirements for enterprise customers.
  • Retention & deletion — data is retained per your agreement and returned or deleted on offboarding.
  • Sub-processors — we use a small set of vetted providers, each bound by data-protection obligations; a current list is available on request.

Reporting a vulnerability

We welcome responsible disclosure. If you believe you've found a security issue, email security@laundry-os.com with the details and we'll respond promptly. Please give us a reasonable opportunity to investigate and remediate before any public disclosure.

Questions about security?

Our team is happy to walk through controls, sub-processors and our DPA.

Talk to our team →