How Lunon is building a culture of privacy

Privacy at Lunon is not a compliance requirement that sits beside the work. It is part of how the work is done.

The reason is practical. Clients share their most sensitive material with us because they need a decision fast. If they had to worry about where that material goes, they would slow down, share less, and get a weaker answer. Privacy is what makes the speed possible.

Embedded from the top down

The commitments were set by the founders, not delegated to a policy document.

They are short: client material is used for the client’s engagement and nothing else. Access is limited to the people doing the work. Nothing is kept longer than the engagement requires. No client material trains a model.

Everyone who joins hears them in their first week, and every system that touches material is designed against them.

Clear and transparent commitments

We put the commitments in writing, in the engagement terms, so they are enforceable rather than aspirational.

1. No retention beyond the engagement. Material is kept for the life of the work and then returned or deleted on the client’s instruction. Deleting an engagement removes its documents, deliverables, and working files, and backups roll off within fourteen days.

2. No eyes beyond the team. Only the engagement team can see client material. There is no standing access for anyone else, and access ends when the engagement ends.

3. No training. Client material does not train models, ours or a provider’s. It informs one engagement and nothing else.

The same commitments are required of the model providers we use: zero data retention and no training, checked before any engagement runs. If a provider cannot make them, we do not use it.

From feedback to action

Clients have shaped these controls directly.

Investors ask how long material stays in our systems after close, so retention is tied to the engagement rather than to a calendar. Advisors ask exactly who can open their data room, so isolation is enforced at the database layer and every access is logged to a trail that cannot be edited.

We would rather be asked a hard question before an engagement than discover the gap during one.

Applying the rules that apply

Our clients operate across jurisdictions, so we do too. We track the privacy and AI rules that apply where our clients operate and work with counsel on how each applies to material we hold for a client. Material is hosted in the United States, and we say so plainly.

A living value

A culture is only real if it changes behaviour when nobody is checking.

We review access, deletions, and provider terms on a fixed schedule. We ask clients what worried them. We change the controls when the answer is not what we hoped.

At Lunon, privacy is more than a policy. It is the habit that makes the work trustworthy.