Snapshot 154334
Normalized text
Scripts and page chrome removed; this is what change detection compares.
Announcements Please Read Before You Proceed Published on Aug 27, 2025 If for some reason you're not able to download the requested documents, please reach out to security@spekit.co so that we can provide you the requested documents manually. Compliance Documentation of our compliance against global standards including certifications, attestations, and audit reports. Security Documents Policies Continuous monitoring App Security Annual Penetration Tests Code Review Process Disclosure Process for Customers Employee Disclosure Process Quarterly Vulnerability Scan Software Development Life Cycle Policy Vulnerability Management Web Application Firewall Data Security Daily Database Backups Encryption at Rest Encryption in Transit Security Policies System Access Control Policy Infrastructure Security Cloud Data Storage Restricted Multiple Availability Zones Password Policy and Configuration Require Encryption of Web-Based Admin Access Security Patches Automatically Applied Network Security Access to Remote Server Administration Ports Restricted Logging/Monitoring Malware Detection Software Installed Network Security Controls Unique Accounts Used Organization Security Acceptable Use Policy BCP/DR Tests Conducted Annually Code of Conduct Disaster Recovery Plan Incident Response Plan Incident Response Team Security Training Product Security Databases Monitored and Alarmed Hard-Disk Encryption Maintains a Terms of Service Messaging Queues Monitored and Alarmed MFA on Accounts PostGres Database Monitored and Alarmed Servers Monitored and Alarmed Session Lock Subprocessors Warmly Warmly’s true person-level intent platform makes your marketing effective by automatically identifying your ideal customers, monitoring their buying intent in real time, and enga... Data location: United States Mango Technologies, Inc. (ClickUp) Project management Data location: United States Twilio Inc (Segment) Data location: San Francisco Zoom Video Video conferencing Data location: San Jose, CA Talend ETL service Data location: San Mateo, CA SendGrid Transactional emails Data location: San Francisco, CA Topics and common questions 5 Spekit is utilizing controls within Processing Integrity Trust Criteria to demonstrate Spekit's AI position in our most recent SOC 2 Type 2 report, end of Section 4, page 111. You can request access to that report at the top of this trust center. You can also find and request to review our data privacy and security FAQs for our AI features under 'Security Documents' available on this Trust Center. Contact details (including at least name, address, e-mail address that is collected during sign up with Spekit); IT systems information (including at least user ID and password used for logging into Spekit); IP address; User agent; App integration IDs; Salesforce instance and user information - collected and processed to provide Spek functionality in association with our Salesforce metadata API integration Spek data The Spekit platform allows (your) Spekit users to create and upload content to Spekit's platform Spekit does not collect, process or store any sensitive data through the operation of our Services. The Spekit extension doesn't store any on-page data. The extension scans the current page and looks for preset markers in the HTML so that it knows where to inject Spek icons. The on-page data never reaches our servers. We do not use customer data to train AI models. For more information on AI, see the data privacy and security FAQs for our AI features available for request under the 'Security Documents' on this Trust Center. You may request to see the 'Spekit Security and GRC Overview' document available under 'Security Documents' on this Trust Center for a general overview of all things security and GRC at Spekit. Spekit is a remote first company and our cloud service provider, Amazon Web Services (AWS), is responsible for implementing and maintaining controls related to physical security to protect data and systems. Yes, Spekit is compliant with the California Consumer Privacy Act (CCPA) and General Data Protection Regulation (GDPR). Additional details Spekit’s Commitment to Data Security and Privacy in an AI-First World: https://www.spekit.com/blog/a-letter-from-the-cto-spekits-commitment-to-data-security-and-privacy-in-an-ai-first-world Privacy details Please see our Privacy Policy for additional details. Privacy URL