Trust center
Service level targets
- Uptime target 99.5% monthly per customer Environment
- P1 response First response within 4 business hours
- Support window Business days 09:00–17:00 CET · hello@spot-suite.com
- Incidents Email notification to affected customers with a post-incident summary
- Maintenance Announced in advance · most updates deploy without downtime
- Contractual SLA Available for enterprise agreements on request
Subprocessors
- Cloudflare EU points of presence · edge hosting, compute, and storage (Workers, D1, R2)
- Microsoft Azure EU regions · compute and storage
- Changes Customers are notified in advance before any subprocessor change
Posture, disclosure, and paperwork
-
EU data processing by default
All customer data is processed and stored in the European Union on every plan, under Spot Cloud B.V., registered in the Netherlands. Transfers outside the EU/EEA happen only on the customer’s written instruction.
-
Compliance posture
Controls are built following ISO 27001:2022 and the SOC 2 Trust Services Criteria. Formal SOC 2 or ISO certifications are not claimed — control mapping and audit evidence are shared under NDA.
-
Identity and provisioning
Spot Suite OIDC with Microsoft Entra ID, Okta, or any OIDC provider, with TOTP MFA enforced on every account. SAML and SCIM provisioning are on the enterprise roadmap, prioritized with design partners.
-
Vulnerability disclosure
Report security issues to hello@spot-suite.com. Reports are acknowledged within two business days and disclosure is coordinated with the reporter. A machine-readable policy lives at /.well-known/security.txt.
-
Security questionnaires
SIG- and CAIQ-style vendor questionnaire answers, the DPA, and control mapping are available on request, with a typical turnaround of two business days.
-
Backups and continuity
Customer data is covered by encrypted automated backups. Recovery objectives and restore procedures are shared on request as part of vendor review.
Running a vendor security review?
Get the DPA, control mapping, or questionnaire answers — typical turnaround two business days.