An X-Ray with EU data sovereignty, end to end.
Lightbringer, patent protection powered by AI, ran the X-Ray under strict data-sovereignty requirements.
Lightbringer
Lightbringer builds AI that handles its customers' most sensitive asset: their intellectual property. So when the team wanted an objective read on its own engineering, the bar was high. Code could not leave Europe, access had to be temporary and read-only, and the SOC 2 scope had to be front and centre.
How it went
Locked-down by design
The scan ran in a locked-down AWS environment in the EU, using EU-only models, with a signed NDA and temporary read-only access. Data sovereignty was a requirement, not an afterthought.
Broad scope, clear focus
Lightbringer opened up its full GitHub, research repositories included, for a complete picture of engineering activity, with the SOC 2-scoped repositories as the core focus.
Delivered through the portal
Results landed in Lightbringer's own X-Ray portal tenant, where the team can access and revisit the reports.
“The X-Ray reached a depth earlier reviews never achieved, with a fraction of the effort on our side.”
What the X-Ray surfaced
- A complete picture of engineering activity, research work included
- An objective read on the repositories that matter for SOC 2
- A baseline the team controls, inside its own portal tenant
The outcome
- An outside-in read on engineering, delivered without compromising data sovereignty
- Security posture reviewed where it counts, on the SOC 2 scope
- A repeatable setup: the next scan runs on the same locked-down rails

Lightbringer
Legal tech
Patent protection powered by AI: agentic patent management combined with expert patent attorneys, for the complete patent lifecycle.
Start with an X-Ray.
1 business day. The complete picture. 250+ assessments delivered.
