Lumen Health
HIPAA-aligned hosting + a real audit trail.
Lumen Health is a digital-therapeutics company building a regulated platform that touches PHI across 18 enterprise customers. Their previous hosting setup was technically capable but produced compliance work measured in person-weeks for every audit. After a four-week evaluation, they moved the entire production estate to Vintony and put the audit-prep tooling in their tech-debt backlog.
Audit-prep time
-78%
1 day vs 4.5 days
Service credits
auto
No claim forms
Customer audits
8
Passed since migration
Region split
UK + EU
Data residency met
The problem
The day-to-day engineering was fine. The compliance work was not. Every quarter the team spent person-weeks compiling an evidence pack for HIPAA, ISO 27001, and the customer-specific audits each enterprise required. The previous host's audit-export tooling was thin; engineers were exporting CloudTrail-style logs into spreadsheets and writing narrative explanations of who-did-what. "We were paying our SREs to do compliance," the head of platform said.
The migration
Lumen moved across two months. Production live in week three, staging mirrored in week five, the final cutover in week eight after their auditor signed off on the audit-trail handover. The Vintony audit log captures every API call against every resource with a structured action verb, target ID, and actor — it is what their auditor wanted from the previous host and never got. Vintony's customer-facing security pack went into their data-room as-is; the customer-audit narrative dropped from a four-day exercise to a half-day one. Service credits for any availability shortfalls now auto-apply against the next invoice; they no longer file claims.
“PCI compliance posture, fast support, and a CTO-friendly pricing model. It's the hosting partner we wished we had four years ago.”
What's next
Lumen are planning a US-region expansion in Q4 to onboard their first North American enterprise. They are also piloting Vintony's managed backup-restore drills as part of their quarterly disaster-recovery exercises.