This public website uses HTTPS and browser security headers, including HSTS, a Content Security Policy, protection against framing, and a no-sniff content-type policy. These describe the public website; confirm enterprise application controls separately.
Privacy and candidate data
Read our privacy policy for how information is collected and used, and how to contact us about it. Agree candidate notices and your organization’s data-handling requirements before inviting candidates.
Session and authorship signals help reviewers investigate possible unauthorized assistance. Coverage depends on the configured environment. An alert is evidence to review, not an automatic misconduct finding.
Send your questionnaire to contact@lunaprompts.com. Confirm the following for your deployment and document the agreed answers before purchase.
Access and identity
Confirm available authentication methods, team permissions, account lifecycle controls, privileged access, and audit history for the enterprise application.
Hosting, encryption, and data location
Request the hosting regions, data flows, encryption controls, key management, and any residency options that apply to your environment.
Retention, export, and deletion
Agree what is retained for candidate submissions, recordings, telemetry, and reports; who can export it; and how deletion requests and contract termination are handled.
AI providers and subprocessors
Request the applicable provider and subprocessor list, what information each receives, model-provider retention terms, and whether submitted data is used for training.
Incident response and continuity
Agree security contacts, notification terms, recovery expectations, backup scope, and service availability commitments.
Independent assurance and agreements
Request any available audit reports, certifications, test summaries, and data-processing terms. This page does not claim SOC 2 or ISO certification; confirm the availability and scope of assurance evidence with our team.
RESPONSIBLE DISCLOSURE
Report a security concern.
Email contact@lunaprompts.com with the affected URL, a description, and steps to reproduce. Avoid including candidate data, passwords, or access tokens. Ask us for a secure way to share sensitive evidence.