Security

How we look after your business's data.

• Encrypted in transit and at rest. Connections to Lunar are encrypted, and sensitive data is encrypted when stored.
• Your data stays yours. Each business's data is kept separate, and you decide which teammates can see what. Bank data is visible only to the owner and the people they choose.
• Statements are handled carefully. Bank and card statements are accepted only in a direct message with Lunar or in the web app, never from a channel, and the original files are not kept.
• No training on your data. Lunar uses an AI provider to read documents and understand questions; neither Lunar nor the provider trains models on your data.
• You can leave cleanly. Uninstalling deletes your data after 30 days, and an owner can delete everything immediately. See deleting your data.

Service providers

Lunar relies on a small number of service providers to run: a cloud hosting provider, which runs Lunar and stores its data; an AI model provider, which reads documents and questions; Slack, where Lunar runs; an email receiving provider, for documents you email to Lunar; a transcription provider, for voice notes, only if that feature is enabled; plus any services you choose to connect. Each handles your data only to provide Lunar, and none may use it to train AI models.

Security reviews

Detailed security documentation is available to customers and reviewers on request: support@mittenmoonholdings.com.

Reporting a vulnerability

Email support@mittenmoonholdings.com. We will acknowledge within two business days. Please do not access other people's data while testing.