The contractual measures are in the Security Measures Schedule, which forms Annex II of the DPA. This page is a summary, not an additional SLA.
Hosting and residency
Production hosting and database backups are in the United States. Advigator does not currently offer EU-only or India-only data residency. Ancillary processing and access locations depend on the providers identified in the provider register. Contact legal@advigator.com before purchase if your organisation has residency requirements.
Safeguards
The Security Measures Schedule covers encryption, logical access restrictions, confidentiality, monitoring, backups and incident handling. Retention and erasure are described in the Data Retention and Deletion Policy. Technical evidence and architecture information may be supplied under confidentiality for a proportionate security review.
Enterprise requirements
No SOC 2 attestation or ISO/IEC 27001 certification is currently held by Advigator. No independent penetration-test report or Accessibility Conformance Report is represented as available by this overview. Provider certifications are not Advigator certifications.
Customer SSO, SCIM and MFA, a comprehensive exportable audit log, contractual recovery objectives, 24/7 support and an uptime SLA are not included in the standard service. Confirm availability and any agreed commitments in writing before relying on them. Future plans are not contractual commitments.
Support and incidents
The Support Policy describes support hours and target responses. A separately signed SLA may provide additional commitments. Security incidents and vulnerabilities can be reported under the Vulnerability Disclosure Policy. Customer breach notifications follow the DPA.
Procurement
For a questionnaire, signed DPA, available evidence or a proposed SLA, contact legal@advigator.com. The scope of a review, confidentiality arrangements and available evidence will be confirmed. Detailed infrastructure configuration and sensitive security findings are not published on this site.