Solutions Industry

Public sector and regulated workloads

Government and regulated workloads need to answer where data lives, who can reach it and how it is encrypted, with documents to prove it. LumoAuth keeps your organization's data in the EU or US region you choose, keeps keys in your HSM, and ships the processing records and impact assessments auditors expect.

Start free Data residency

Sovereignty rules out most identity providers

Data must stay in the jurisdiction, keys must be under national control, and procurement needs documents that prove both.

How LumoAuth solves it

EU region with no cross-border replication

Choose the EU region when you create your organization. Data stays there. Docs

Federation with national identity providers

SAML 2.0 and OpenID Connect connections to eID schemes and partner agencies. Docs

Keys in a certified HSM

FIPS 140-3 Level 3 devices through AWS CloudHSM, Azure Managed HSM, Thales, Entrust or PKCS#11. Docs

Encryption and hardening

TLS 1.2+, application-layer encryption of secrets, strict security headers, documented production checklist. Docs

Procurement documentation

Architecture, records of processing, impact assessments and a standards reference for every protocol. Docs

Passkeys for citizens and staff

Phishing-resistant sign-in with certified authenticators. Docs

Setting it up

Create the organization in the EU region

Connect the HSM and the identity federation

Generate the compliance records

Standards involved

Plain names on the left, the specification on the right. The full map is in the standards reference.

SAML 2.0 and OpenID Connect: OASIS SAML, OIDC Core
Passkeys: WebAuthn, FIDO2, FIDO MDS
Keys: PKCS#11, FIPS 140-3 L3 HSMs

Standards reference on the docs site

Which plan you need

The EU region is on every plan; the full compliance suite and HSM keys are on Business.

See all plans and add-ons

Documentation

Data residencydocs.lumoauth.dev/user-guide/compliance/data-residency Key storagedocs.lumoauth.dev/integrations/key-storage Standards referencedocs.lumoauth.dev/reference/standards

Questions

Can we restrict who reaches the admin portal?

Yes. Allow-list networks, require SSO and step-up for administrators, and stream every admin action to your SIEM.

Ship passwordless sign-in this week. Put guardrails on your agents today.

The Developer plan is free for 10,000 monthly users and ten agents, with no card. Everything speaks open standards, so moving in or out is a config change.

Start free Talk to us Read the docs