Luminance

Not yet assessed. We publish a sovereignty position only where the vendor documents one — we do not infer it from a domain or a company name.

Luminance publishes a list of the other companies it uses as sub-processors. It lists 8 entries, and some name the same company more than once, under different locations, for different purposes or in more than one of its lists. Each is shown below with the location the vendor lists it under, in the vendor’s own words.

Under its heading “INFRASTRUCTURE PROVIDERS”: Customer Data is not sent to an external model provider.

Under its heading “GENERATIVE MODEL PROVIDERS”: Customer inputs are sent to the provider. The Controller recognises and agrees that by opting in to using functionalities (including, but not limited to Ask Lumi) which utilise Additional Generative Models, in certain circumstances redaction may not be possible (for example with respect to the actual words/data entered as a query or requested redraft), and that the Processor shall not be responsible or liable for any confidentiality or intellectual property issues which may arise as a direct result (superseding any terms set out in the Agreement).

Taken together those entries name at least EU, European Union, UK, United States. That is what our place list could match in the vendor’s own words above, so treat it as a floor rather than the whole of it — the entries themselves are the record.

These are other companies, not Luminance. Where a sub-processor is listed as operating is a fact about that company. It is not a statement about where Luminance keeps your data, which Vannus publishes separately and only from a document in which the vendor says so.

The same document also lists 2 entries for Luminance’s own corporate group, or for companies that carry its name. They are counted separately from the entries above, which are other companies.

Read from luminance.com on 2026-09-23, from the page the vendor titles “Luminance Master Hosted Terms — Luminance”. Every entry above is a verbatim span of that page.

This is the vendor’s own disclosure, reproduced. Vannus has not audited what any of these companies do with your data, and a list can change without notice. Treat it as a starting point for your own review, not a legal determination, and take advice on anything that matters.

Vannus records, from the vendor's own published documents, the legal entity a customer contracts with, the country that entity sits in, and the governing law of its terms — and whether the vendor runs its own model or resells someone else's. Each finding is quoted to its source and dated, or marked not disclosed where the vendor publishes nothing. No paid placement on a record, in the catalog or in search — affiliate status is walled off from the record, enforced by a test in the build. See the methodology →