# Lunar Energy

Lunar Energy demonstrates its commitment to security by generating and maintaining a Vanta trust report. Vanta pulls our monitored controls directly from the platform and can attest to the organizational and technical controls that have been implemented in accordance with industry accreditation such as ISO27001:2022 and SOC2 Type I & II, as well as other relevant regulation and/or legislation.

## Compliance

- ISO 27001:2022

- SOC 2
- GDPR
- NIST CSF 2.0
- NIST 800-53
- CIS Critical Security Controls v8.1
- NIS 2 Directive

## Resources

### ISO 27001

- [ISO 27001:2022 - Certificate](https://trust.lunarenergy.com/?requestAccessOpen=true&requestedResources=683efa5d985a33dd6934b361)

### SOC2

- SOC 2 Type I - Attestation Status  
  - [SOC 2 Type I - Report \[NDA Required\]](https://trust.lunarenergy.com/?requestAccessOpen=true&requestedResources=683efbaa1611e28f3a463837)

- SOC 2 Type II - Attestation Status  
  - [SOC 2 Type II - Report \[NDA Required\]](https://trust.lunarenergy.com/?requestAccessOpen=true&requestedResources=686687d23f55e19cd152eaeb)

## Controls

Updated 10 minutes ago

### Infrastructure security

- Unique production database authentication enforced
- Unique network system authentication enforced
- Remote access MFA enforced

### Organizational security

- Asset disposal procedures utilized
- Production inventory maintained
- Code of Conduct acknowledged by contractors

### Product security

- Control self-assessments conducted
- Vulnerability and system monitoring procedures established

### Internal security procedures

- Continuity and Disaster Recovery plans established
- Continuity and Disaster Recovery plans tested
- Cybersecurity insurance maintained

### Data and privacy

- Data retention procedures established
- Data classification policy established

## Data processed

- Customer personally identifiable information
- Employee personally identifiable information

Vanta connects to a company's core systems to continuously monitor these controls.