Trust center
Service level targets
- Uptime target 99.5% monthly per customer tenant
- P1 response First response within 4 business hours
- Support window Business days 09:00–17:00 CET · hello@spot-suite.com
- Incidents Email notification to affected customers with a post-incident summary
- Maintenance Announced in advance · most updates deploy without downtime
- Contractual SLA Available for enterprise agreements on request
Subprocessors
- Cloudflare EU points of presence · edge hosting, compute, and storage (Workers, D1, R2)
- Microsoft Azure EU regions · compute and storage
- Changes Customers are notified in advance before any subprocessor change
Posture, disclosure, and paperwork
-
EU data processing by default
All customer data is processed and stored in the European Union on every plan, under Spot Cloud B.V., registered in the Netherlands. Transfers outside the EU/EEA happen only on the customer’s written instruction.
-
Compliance posture
Controls are built following ISO 27001:2022 and the SOC 2 Trust Services Criteria. Formal SOC 2 or ISO certifications are not claimed — control mapping and audit evidence are shared under NDA.
-
Identity and provisioning
Spot Suite OIDC with Microsoft Entra; passkeys or authenticator-app MFA on every tier. SCIM provisioning is on the enterprise roadmap, prioritized with design partners.
-
Vulnerability disclosure
Report security issues to hello@spot-suite.com. Reports are acknowledged within two business days and disclosure is coordinated with the reporter. A machine-readable policy lives at /.well-known/security.txt.
-
Security questionnaires
SIG- and CAIQ-style vendor questionnaire answers, the DPA, and control mapping are available on request, with a typical turnaround of two business days.
-
Backups and continuity
Customer data is covered by encrypted automated backups. Recovery objectives and restore procedures are shared on request as part of vendor review.
Running a vendor security review?
Get the DPA, control mapping, or questionnaire answers — typical turnaround two business days.