Security

OpenSpot is built with enterprise-grade security. We protect your data and infrastructure with industry-leading practices.

Encryption

All data encrypted in transit (TLS 1.3) and at rest (AES-256).

Access Control

Role-based access control with API key scoping and audit logging.

Monitoring

24/7 security monitoring with automated threat detection.

Infrastructure

Hosted on SOC 2 compliant cloud infrastructure with redundancy.

Data Handling

Data Minimization: We collect only the data necessary to provide our services. Parking access logs are retained according to customer requirements.

Data Location: Customer data is stored in the region specified in your service agreement. We support US, EU, and other regional deployments.

Data Portability: Customers can export their data at any time through our API or upon request.

Responsible Disclosure

We appreciate security researchers who help keep OpenSpot and our customers safe. If you've discovered a security vulnerability, please report it to us responsibly.

Report a Vulnerability

For security inquiries or to request our SOC 2 report:

security@openspot.io