Snapshot 88787

Document
Trust center
URL
https://trust.spacelift.io/
Fetched
HTTP status
200
Content type
text/html
Fetch mode
browser
Size
104891 bytes
SHA-256 (raw)
a0e017859754a590d32011192bcd494dd4c5ab79eb14a7adceefe3ab11bc3565
SHA-256 (normalized text)
d8c2476eeb855fbba95f4e188d2c8e848f0d0c5ba2f6f26516ff879c38010cc8

Raw (normalized text)

Scripts and page chrome removed; this is what change detection compares.

Skip to navigationSkip to main content
Opens in new tab
|Trust Center
Spacelift
Spacelift is an infrastructure orchestration platform that manages your entire infrastructure lifecycle — provisioning, configuration, and governance. Spacelift integrates with all your infrastructure tooling (e.g. Terraform, OpenTofu, Kubernetes, CloudFormation, Pulumi, Ansible) to provide a single integrated workflow so you can deliver secure, cost-effective, and resilient infrastructure, fast.
By automating deployment and configuration, providing developer self-service, golden paths with guardrails, and an OPA policy engine, Spacelift empowers businesses to accelerate developer velocity while maintaining control and governance over their infrastructure.
security@spacelift.io
Privacy Policy
Compliance
SOC 2
AWS Foundational Technical Review
GDPR
Resources
View all
Certificate of Insurance
SOC 2 Type II Report
SaaS AWS Architecture Diagram
Self-hosted AWS Architecture Diagram
Spacelift's Security Addendum 2025
Spacelift Policies 2025.pdf
Spacelift Pentest Report 2026.pdf
PCI-DSS SAQ-A 2025.pdf
Bridge Letter 27.pdf
Controls
View all
Infrastructure security
Unique production database authentication enforced
Encryption key access restricted
Unique account authentication enforced
View 13 more Infrastructure security controls
Organizational security
Asset disposal procedures utilized
Anti-malware technology utilized
Employee background checks performed
View 7 more Organizational security controls
Product security
Data encryption utilized
Control self-assessments conducted
Penetration testing performed
View 1 more Product security control
Internal security procedures
Continuity and Disaster Recovery plans established
Continuity and Disaster Recovery plans tested
Cybersecurity insurance maintained
View 28 more Internal security procedures controls
Data and privacy
Data retention procedures established
Customer data deleted upon leaving
Data classification policy established
Data collected
PII data in a very limited scope needed for authentication purposes or/and concerning services usage
Credit card information
Personal health information
Subprocessors
View all
HubSpot • Marketing
US
delivered by HubSpot, Inc., Two Canal Park, Cambridge, MA 02141, USA
Google Workspace • Internal Email and File Storage
USA/EU
delivered by Google LLC, 1600 Amphitheatre Parkway, Mountain View, California 94043, USA
AWS • Cloud data storage, computing services
EU
delivered by Amazon Web Services, Inc., 410 Terry Avenue North, Seattle, WA 98109-5210, USA
Slack • Internal and External Instant Messaging
USA
delivered by Salesforce Inc., Salesforce Tower, located at 415 Mission Street, San Francisco, California, USA
Updates
View all
General
Welcome!
Published April 6, 2025
Should you have any questions concerning our Trust Center page, do not hesitate to reach out!