Signed SLA, named contact, and an MSA your Legal team can approve.
For regulated deployments, plant-floor uptime commitments, and air-gapped installs. The commitments below become contractually binding under a mutually executed MSA on the Team ($299/mo) and Enterprise ($999/mo) plans.
Uptime & incident response
- Uptime commitment
- 99.9% monthly for the hosted API (Team & Enterprise). Measured as successful /discover and /predict responses in the 200/402 range from a third-party synthetic monitor.
- Credit schedule
- Below 99.9%: 10% credit. Below 99.0%: 25%. Below 95.0%: 100% of the affected month, credited to the next invoice.
- Severity 1 (production down)
- Response within 24 hours for Team plans, within 4 hours for Enterprise. Definition: hosted API returning ≥ 25% 5xx for > 15 minutes, or on-prem deployment fully unreachable.
- Severity 2 (degraded)
- Response within 2 business days. Elevated latency, drift-monitor false positives, single-feature regressions.
- Severity 3 (question / feature request)
- Response within 5 business days.
- Communication channels
- Named Slack Connect channel (Team+). Dedicated phone line and PagerDuty integration (Enterprise). Status page at formulize.dev/status.
Where your data lives
- Hosted API (default)
- Cloudflare Workers global edge. Cold-storage archive in AWS us-east-1. No datapoint retention beyond the fit lifecycle unless you enable drift monitoring.
- EU-only option
- Frankfurt inference + Ireland archive. Zero data egress from the EU. Available on Team and Enterprise plans at no additional cost.
- India-only option
- Mumbai inference + Hyderabad archive. Complies with RBI localization requirements. Available on Enterprise.
- US-only option
- US-East + US-West. GovCloud tenancy available on Enterprise.
- On-prem / air-gapped
- Docker image runs entirely inside your network. No outbound calls. Model updates via signed offline bundles. Enterprise only.
Current posture
GDPR — DPIA on request
Data-Processing Impact Assessment template available under NDA. DPA co-signed on Enterprise contracts.
Encryption in transit & at rest
TLS 1.3 on the API, AES-256 for stored fits, key rotation every 90 days.
Data-minimization
Training data purged 24 hours after fit completion by default. Extend under contract to 30d/90d/persistent.
SOC 2 Lite
Type I readiness assessment underway with Vanta. Bridge letter available under NDA in the interim.
ISO 27001 gap analysis
Started for Enterprise customers with formal audit requirements. Timeline discussed under MSA.
HIPAA BAA
Available Q2 2027 pending customer demand. Contact sales to add your name.
You get a name and a phone number
Every Team and Enterprise contract is signed with a named individual, not a shared inbox. Plant managers need to know who to call when the drift monitor fires at 3 a.m.
Ready to sign an MSA?
Send us your standard template or ask for ours. We aim to redline within 5 business days. NDA available first if your Legal team needs to review the technical architecture in detail.