Enterprise Procurement Pack
Download security documentation, compliance materials, and legal templates to complete your vendor assessment. All documents are versioned and dated.
Need everything at once?
Request the complete procurement pack and we'll send all available documents to your inbox.
Request Complete PackSecurity
Security Overview
PDFArchitecture summary, encryption, authentication, authorization, audit logging, and incident response overview.
v1.2 · Updated 2026-04-01
Architecture Summary
PDFComponent diagram, data flow, deployment topology, and infrastructure details.
v1.1 · Updated 2026-03-29
Shared Responsibility Model
PDFDefines security responsibilities between SpoofSentry and customers across all layers.
v1.0 · Updated 2026-03-15
Penetration Test Summary
PDFExecutive summary of most recent penetration test findings and remediation status.
Legal
Data Processing Agreement (DPA)
PDFStandard DPA template compliant with GDPR, CCPA, and applicable data protection regulations.
v2.0 · Updated 2026-03-15
Compliance
CAIQ / SIG Lite Responses
XLSXPre-completed Consensus Assessments Initiative Questionnaire and SIG Lite responses.
v1.0 · Updated 2026-03-22
Retention & Deletion Policy
PDFData retention schedules by plan tier, deletion procedures, and legal hold capabilities.
v1.1 · Updated 2026-04-01
SOC 2 Type II Report
PDFIndependent third-party audit report covering security, availability, and confidentiality trust service criteria.
Operations
Business Continuity Summary
PDFDisaster recovery strategy, RTO/RPO targets, backup procedures, and incident response plan.
v1.0 · Updated 2026-03-28
Frequently Asked Questions
How do I get the SOC 2 Type II report?
Our SOC 2 Type II audit is in progress. Contact [email protected] to be notified when it's available and to request current evidence bundles.
Can I get a custom NDA or DPA?
Yes. We provide a standard DPA template that covers GDPR and CCPA. If you need custom terms, contact [email protected].
Do you support data residency requirements?
Our primary infrastructure is in the US. For specific data residency requirements, contact us to discuss available options.
How often are these documents updated?
All documents are versioned with date stamps and reviewed quarterly. Material changes are communicated to existing customers.
Need help with your vendor assessment?
[email protected]