Trust Centre
LIMINI, formerly Flourish, runs the marketing workflow for enterprise brands in regulated industries, from audience insight to campaign review. Our clients trust us with their claims, their evidence and campaigns that haven't launched yet, so we protect that work with the same care we help them bring to their marketing.
This page sets out the certifications we hold, the controls we run and the companies that process data on our behalf. Restricted documents, including our audit reports and security pack, are available on request.
Compliance
- Certified
ISO 27001
Our information security management system is certified to ISO/IEC 27001.
- Certified
SOC 2
Our controls are independently audited against the AICPA Trust Services Criteria.
- Compliant
UK and EU GDPR
We process personal data in line with UK and EU data protection law.
- Certified
B Corp
LIMINI is a certified B Corporation.
Resources
- Restricted
Security pack
An overview of how LIMINI protects client data, written for procurement and information security teams.
- Restricted
SOC 2 report
Our most recent independent SOC 2 audit report.
- Restricted
ISO 27001 certificate
Our current ISO/IEC 27001 certificate and statement of applicability.
- Restricted
Penetration test summary
A summary of findings and remediation from our latest independent penetration test.
- Restricted
Information security policy
The policy that governs how we manage information security across LIMINI.
Controls
View allInfrastructure security
5 controlsEncryption at rest
Encryption in transit
Restricted production access
Organisational security
4 controlsSecurity awareness training
Confidentiality agreements
Managed devices
Product security
5 controlsClient data in the client's own Vault
No model training on client data
Role-based access
Internal security procedures
5 controlsIncident response plan
Business continuity
Change management
Data and privacy
3 controlsData processing agreements
Retention and deletion
Data subject requests
Subprocessors
| Name | Purpose | Location |
|---|---|---|
| Bubble | Application hosting | United States |
| Amazon Web Services | Cloud infrastructure | European Union |
| Supabase | Database hosting | United Kingdom |
| Vercel | Web hosting | European Union |
| Anthropic | AI model provider | United States |
Frequently asked questions
Is our data used to train AI models?
No. Your data is held in your organisation's own Vault and is never used to train models.
Which certifications does LIMINI hold?
LIMINI is ISO 27001 certified and SOC 2 certified. You can request the certificate and audit report from this page.
How do I get your SOC 2 report or security pack?
Select Request access, tell us who you are and accept the confidentiality terms. Once we approve your request, we'll email you a link to every restricted document on this page.
Where is our data hosted?
Our subprocessors are listed on this page with the location where each one processes data. If your organisation needs data held in a particular region, get in touch and we'll set out the options.