generated: '2026-07-21'
method: searched
source:
- https://www.spot.ai/security
- openapi/*.json
standards:
- id: soc2-type-ii
  conforms: true
  evidence: SOC 2 Type II stated on https://www.spot.ai/security
- id: hipaa
  conforms: true
  evidence: HIPAA compliance stated on https://www.spot.ai/security
- id: ndaa
  conforms: true
  evidence: NDAA-compliant cameras/platform stated on https://www.spot.ai/ and /security
- id: oauth2
  conforms: false
  evidence: securitySchemes use http bearer (API key), not oauth2
- id: openid-connect
  conforms: false
- id: rfc9457-problem-details
  conforms: false
  evidence: errors use a custom ValidationError envelope, not application/problem+json
- id: cursor-pagination
  conforms: true
  evidence: next/prev cursor + limit params across list operations
- id: signed-webhooks
  conforms: true
  evidence: RSA256-signed webhooks with per-org JWKS verification
- id: tls
  conforms: true
  evidence: TLS enforced on all hosts (probed); data in transit over TLS v1.2 (security page)