Knowledgebase

Do you need an NDA or trial agreement for POCs?

Spur doesn't require a trial agreement but is flexible — many customers want one. Spur can sign mutual NDAs and typically turns them around within a day. A Mutual Non-Disclosure Agreement template is listed on trust.spur.us — request access there to get started.

Does Spur have an incident response plan and a business continuity/disaster recovery plan?

Yes. Spur maintains documented security and privacy incident response policies, with the incident response plan tested at least annually, and a Business Continuity/Disaster Recovery plan that is also tested at least annually. See trust.spur.us for the full list of published security controls.

Does Spur maintain cybersecurity insurance?

Yes. Spur maintains cybersecurity insurance to mitigate the financial impact of business disruptions. A Certificate of Insurance is available on request through trust.spur.us.

Does Spur offer a Data Processing Agreement (DPA)?

Yes. Spur's DPA covering standard data processing controls is listed on trust.spur.us — request access there, or contact your account team or support@spur.us.

Does Spur perform penetration testing and vulnerability scanning?

Yes. Spur performs penetration testing at least annually, with a remediation plan tracked to completion, and runs host-based vulnerability scans at least quarterly on all external-facing systems, with critical and high findings tracked to remediation. See trust.spur.us for the full list of published security controls.

Does Spur provide security and compliance documentation?

Yes. Security, compliance, and vendor-review documentation is available self-serve at trust.spur.us, Spur's Trust Center. Compliance questions specific to your organization that aren't covered there can go to your account team or support@spur.us.