Security
What your IT team can verify.
These guarantees come from how lumnik is built, not from a setting. The documentation gives the check for each one.
Your systems
The lumnik hub — on your infrastructure
Your teams
Read-only. Connectors read. No path writes back to your software.
The database enforces isolation. PostgreSQL separates each organization's rows with Row-Level Security.
Generated SQL can only read. With Pro, the AI's query runs under a role with no write permission, whatever the model produces.
The application cannot change the audit trail. Its role has no UPDATE or DELETE permission on the audit table. By default, a retention job deletes entries older than 365 days. You can change this period.
Self-hosted. The hub runs on your servers. With Pro, the AI model can run there too.
Reversible. Plain PostgreSQL tables and a standard pg_dump. You do not need a vendor to export your data.
Verify it in five minutes Reversibility The lumnik Open code Beta Where lumnik stands