Your monitoring data, under EU law.

Where your data lives, how long we keep it, and where we honestly stand on SOC 2, ISO 27001, DORA and NIS2. What an auditor will ask, on one page.

All plansSigned DPA on request, on every plan
Where your data lives LIVE
Platform & databaseScaleway · Paris, France EU
BackupsOVHcloud · Gravelines, France EU
Check resultsStored in Paris EU
ProbesScaleway, UpCloud · EU — OVHcloud · London (adequacy decision) EU · UK
PaymentsStripe · named in the privacy policy EXCEPTION
AnalyticsSelf-hosted Matomo · no Google Analytics EU
Where we stand

Compliance, without the fine print.

What is in place today, and what is a direction rather than a certification.

GDPR IN PLACE
EU hosting, bounded retention, data export and a DPA on every plan.
DORA & NIS2 SUPPORTS
Severity, timestamps and an external communication channel help you meet your own obligations.
SOC 2 ROADMAP
Incident communication, documented retention, timestamped history: heading there.
ISO 27001 ROADMAP
Same direction as SOC 2. Not a certification obtained today.
Retention

Kept as long as your plan says, then deleted.

No plan has unlimited retention. Beyond the window, check results are deleted automatically every day.

Free
90 days
Pro
6 months
Max
12 months
Enterprise
24 months

Retention is set by the plan, in line with GDPR's data minimization principle. An Enterprise customer can ask for a shorter period.

Audit trail

Every incident, on the record.

A timestamped cycle, each step attributed to the team member who posted it.

14:02 Investigating Raised by monitoring, or reported by a user through "Report an issue".
14:11 Identified Root cause documented and timestamped.
14:34 Monitoring Fix deployed and under watch.
14:58 Resolved Closed and communicated to subscribers.
On request

What your auditor will ask for.

Published on our legal pages; a signed copy or a security questionnaire on request.

Signed DPA All plans
The DPA applies to every plan; a signed copy is sent on request.
Sub-processors list All plans
Every provider that touches your data, with its location, dated and with an RSS feed.
SLA annex Pro+
99.9% monthly availability on paid plans, with service credits on Max and Enterprise.
Continuity commitment All plans
If OKStatus ever shuts down: 90 days' notice and a full data export.
FAQ

Questions about compliance.

All questions →

Platform and database on Scaleway in Paris, backups on OVHcloud in Gravelines. The probes that run your checks are in the EU for the Paris (Scaleway), Frankfurt, Madrid, Amsterdam and Warsaw (UpCloud) regions, and at OVHcloud in London (UK, adequacy decision) for the London region and the regions that do not yet have a probe on site. Three named exceptions are detailed in the privacy policy: payments (Stripe), social sign-in if you use it, and an AI assistant you link yourself.

Your first monitor in under a minute.

Free plan, no card. Hosted and operated in Europe.