Skip to content

Security and hosting

Your data in your own SpoorFox, hosted in the EU.

SpoorFox is built so that one customer’s data never shares an application with another’s. Here is how we host, protect and govern it.

A private stack per customer

Each customer runs its own SpoorFox application containers and its own database, on its own address. There is no shared application holding several customers’ data.

EU hosting

Stacks run in Microsoft Azure West Europe. Traffic reaches them only through Cloudflare, with TLS end to end.

Single sign-on and 2FA

Sign in with Entra ID, Google or Okta through OpenID Connect, or with a password and mandatory two factor authentication.

Hourly backups, tested restores

An hourly dump of each customer database to immutable storage, with restore tests to prove the backups work.

Privacy by default

Session replay masks inputs by default, a cookieless tracking mode is available, and recording follows your consent settings.

Audit log

Sign-ins, settings, approvals and every change to an ad account are recorded in a per workspace audit log.

Governed automation

Nothing the AI agent or a rule proposes reaches an ad platform until a person approves it, and every change is read back after execution.

Data subject requests

Erasure requests remove a person’s events, recordings and identity data across the workspace.

Security questions or a DPA

For a data processing agreement, a list of subprocessors or a security questionnaire, email privacy@spoorfox.com. Read how we handle personal data in our privacy policy.

See SpoorFox on your own data.

A 30 minute walkthrough of every module, then a 14 day trial on a private stack of your own.