Trust Center
How we protect the job you already run — for customers and security questionnaires. Operated by Negi Enterprise Inc (British Columbia, Canada).
What ships, and what does not
BIM/3D modeling and automatic takeoff that draws for you are out of scope. You calibrate. Find similar may propose count, length, or area — you confirm before it is a quantity. Typed e-sign on the owner portal is included. Envelope e-sign with DocuSign is optional. See Features for the live inventory.
Account security
Two-factor sign-in is available to every user: turn it on in Settings → Security with any authenticator app, and every new sign-in asks for a six-digit code on top of the password. Turning it off requires a fresh code. Anyone can end every other session on their account with one click (Sign out other devices) — useful for a lost phone or a shared computer.
Security researchers: our disclosure contact is published at /.well-known/security.txt.
How we protect the workspace
- Production access requires a signed-in account, with optional two-factor sign-in per user
- Each organization’s data is isolated (row-level security on tenant records)
- TLS in transit; encryption at rest with our cloud providers
- Integration tokens encrypted at rest in production
- Signed portal links; Stripe and e-sign callbacks reject unsigned requests
- Audit log for material financial and portal actions, with CSV export from Settings
- Rate protection on sign-in and APIs
- Error monitoring without personal data in telemetry
Money handling
EstiLumina never holds client funds. Invoice Collect pays your Stripe account — we are not the merchant of record for your job invoices. Subscription billing is separate and processed by Stripe. Accounting stays in your books: exports always work; optional QuickBooks push and Refresh compare stamped documents — books stay in QuickBooks.
Your data, your export
Job data belongs to your organization. Budgets, invoices, takeoff quantities, and audit logs export to CSV or Excel from the workspace at any time — no support ticket, no lock-in window.
Availability
Live service health and a 90-day history of automated checks, run every 15 minutes: System status. Security questionnaires: email support@estilumina.com and we reply with the current controls summary.
Support response times
Every paying workspace gets the same commitment. Business hours are Monday to Friday, Pacific time.
| Severity | What it looks like | First response |
|---|---|---|
| P0 | Outage, data problem, or payments blocked | 4 business hours |
| P1 | A major feature is broken | 1 business day |
| P2 | A workaround exists | 2 business days |
Reach us from Report issue in the top bar of the workspace, by email at support@estilumina.com, or through Help. First response means a person has looked at it and told you what happens next — not an auto-reply.
Legal pack
Contact
Negi Enterprise Inc · support@estilumina.com