Secure. Reliable. Transparent.

Watchers Trust Center

At Watchers, we understand that every notification, message, and piece of data you entrust to us is of the utmost importance. Our Trust Centre brings together the policies, practices, and real‑time resources that keep your data protected and our solution resilient — so your team can integrate it with confidence.

Security

Encryption in Transit & at Rest

TLS 1.2+ everywhere

All traffic between your applications and Watchers’ solution is encrypted using industry‑standard Transport Layer Security (TLS) 1.2 or higher.

AES‑256 at rest

Customer data is encrypted at rest with AES‑256, and keys are managed by Google Cloud KMS.

Key management

Encryption keys are rotated regularly and stored separately from encrypted data.

Secure Development & Operations

Security‑by‑design SDLC

Automated dependency scanning, code review, and penetration testing are integrated into every release cycle.

Least‑privilege access

Multi‑factor authentication, role‑based access controls, and audit logging across all internal systems.

Continuous monitoring

24×7 security event monitoring and alerting, backed by trained incident responders.

Reliability & Availability

99,9 % uptime commitment. Watchers offers a 99,9 % availability Service Level Agreement for paid plans. Full details are documented in our Service Level Agreement.

Real‑time status page.

Current and historical availability metrics are always available at status.watchers.io.

Backups & Disaster Recovery. Encrypted backups are taken overnight, replicated cross‑region, and tested quarterly via DR drills.

Redundant infrastructure.

Our micro‑services run in multiple zones within each region. Automated health checks and self‑healing orchestration limit the blast radius of any single failure.

Data Residency

Choose where your data lives to meet local regulations and performance needs. Watchers uses Google Cloud Platform (GCP) regions, with no data stored outside your selected region by default.

Europe, Middle East, and Africa

Location: Frankfurt, Germany

GCP Region Code: europe‑west3

North & Central America

Location: San Francisco, USA

GCP Region Code: us‑west1

South America

Location: Santiago, Chile

GCP Region Code: southamerica‑west1

Hong Kong, SAR

Location: Hong Kong, SAR

GCP Region Code: asia‑east2

Privacy & Compliance

GDPR, UK GDPR, CCPA, LGPD & PIPEDA compliant. Our data processing practices are aligned with key international privacy regulations, including the EU General Data Protection Regulation (GDPR), UK GDPR and the UK Data Protection Act 2018, the California Consumer Privacy Act (CCPA), Brazil’s Lei Geral de Proteção de Dados (LGPD), and Canada’s Personal Information Protection and Electronic Documents Act (PIPEDA). We support core data subject rights such as access, portability, and deletion.

Data Processing Agreement (DPA). A pre‑signed DPA is available to all customers at https://watchers.io/legal/dpa

Framework alignment. Our controls are mapped to ISO/IEC 27001 and SOC 2 frameworks and reviewed annually.

Sub‑processor transparency. A current list of sub‑processors is maintained at https://watchers.io/legal/sub-processors

Resources & Contacts

Service Level Agreement

System Status Dashboard

Data Processing Agreement

Sub‑processor List

General Support