Where the lots live
Occupancy, permits, plates, citations, and operator configuration sit in a US-region cloud data plane unless the contract says otherwise. If an RFP names a region, we map it before go-live.
Enterprise
Data residency
Parking data stays in a region you can name. The default is the United States. Campuses, airports, and public programs can contract a regional plane when they need one.
Encrypted, backed up, bounded
AES-256 at rest. TLS 1.2 or higher in transit. Backups and point-in-time recovery stay in the same plane. Retention follows the program you signed, not an unbounded archive.
Cards never join that plane
Card numbers never enter Spot systems. Checkout is hosted and tokenized by our PCI Level 1 payment processor. Residency is about parking operations, not a vault we do not run. PCI DSS.
Ready for the exhibit
Policies and subprocessors are in the Trust Center. Talk to us about residency.
More in Trust
- SOC 2 Type II
- PCI DSS
- HECVAT
- Role-based access
- Data residency