SAN MATEO, CA, October 27th, 2026 – Luma Health, the Operational AI platform for healthcare, today announced it has achieved renewed HITRUST® r2 certification and earned the new HITRUST AI Security Certification (ai2), extending its information security program to cover the artificial intelligence capabilities of its platform.
HITRUST r2 certification is one of the most extensive and widely recognized assessments of information security available, evaluating an organization’s risk management program against a broad set of regulatory requirements, industry standards, and control frameworks. HITRUST’s AI Security Assessment and Certification (ai2) extends that same level of scrutiny to artificial intelligence systems, assessing the security of AI model usage, training and tuning practices, and related infrastructure against risks specific to AI-enabled environments. By achieving both certifications, Luma Health has validated the security of its core platform as well as its AI capabilities.
“With AI rapidly transforming how healthcare is delivered, our longstanding commitment to information security holds more importance than ever,” said Denis Savenko, Head of Information Security and IT at Luma. “Our customers trust Luma’s AI with key operational processes. We’re dedicated to rigorous excellence in security and continue to validate that with the best security frameworks available.”
360 Advanced supported Luma Health throughout both assessments, coordinating the renewal of its HITRUST r2 certification alongside its first HITRUST AI Security (ai2) certification under a single engagement team. The two assessments were part of a broader, multi-framework compliance roadmap between the two organizations that also includes ISO/IEC 27001 certification, SOC 2® Type 2 examinations, and penetration testing. This engagement reflects 360 Advanced’s continued focus on helping healthcare technology companies extend their security programs to keep pace with the adoption of AI across patient-facing platforms.
360 Advanced delivers cybersecurity and compliance solutions to organizations ranging from emerging technology companies to Fortune 500 enterprises, with services that include:
- FedRAMP® & GovRAMP™ Assessment Services
- SOC 1® & SOC 2® Reporting
- AIUC-1 Governance & ISO 42001 Advisory Services
- HITRUST® Assessments
- ISO 27001, ISO 27701 & ISO 42001 Certifications
- PCI DSS Assessments
- CMMC Readiness & Advisory Services
- Penetration Testing & Risk Assessments
To learn more about 360 Advanced’s HITRUST assessment services, visit the 360 Advanced HITRUST page.
About Luma Health
Luma Health’s operational AI platform eliminates bottlenecks to make health systems more efficient—from the patient journey to the back office. Headquartered in San Francisco, Luma has R&D centers in the US, Brazil, and Europe. We serve more than 1,000 healthcare organizations with 100+ million patients across the US, UK, and the Caribbean. To learn more, visit www.lumahealth.io.
Luma Health Media Contact
lumahealth@nextpr.com
About 360 Advanced, Inc
360 Advanced is a technology-forward cybersecurity and compliance firm, specializing in assessments and certifications. By combining AI-enabled technology, proven processes, and experienced professionals, we deliver efficient, high-quality engagements grounded in human judgment. Our unified teams work across services to help organizations navigate evolving compliance requirements and emerging technologies, while reducing redundant fieldwork and demands on client resources. For more than 20 years, we’ve served as trusted advisors to businesses seeking to demonstrate credibility, expand market access, and unlock new opportunities for growth. For more information, visit www.360advanced.com.
360 Advanced operates under an alternative practice structure in accordance with all applicable laws, regulations, standards, and codes of conduct of the AICPA. Read full disclaimer here.
Media Contact
Megan Brooks
Vice President of Marketing
marketing@360advanced.com
:::::::::::::::::::::::::::::::::::::::::::::::::::::
