Security & Operations

Standards & compliance, control by control.

A live, audit-grade view of how SPUR Innovation Centre maps to SOC 2 Type II, PCI-DSS v4.0, and ISO 27001:2022. The same matrix our internal team uses, opened up so prospective clients, partners, and auditors can see exactly where we stand.

Disclosure. SPUR's facilities are engineered to standards that meet and exceed SOC 2 Type II, PCI-DSS v4.0, and ISO 27001:2022 control requirements. SPUR does not currently hold formal third-party certification for these frameworks. Detailed security and operational controls documentation is available under NDA on request.

Framework readiness

Each card is computed live from the matrix below. Score weighting: full = 100%, partial = 50%, gap = 0%.

Compliance matrix

Every control SPUR operates, mapped to the corresponding clause in each framework. Click a row's status icon for the legend.

● Fully implemented

◐ Partially implemented

○ Gap or planned

— Not applicable

Control area	SPUR implementation	SOC 2 Type II	PCI-DSS v4.0	ISO 27001 :2022	Status

Where SPUR exceeds standards

Capabilities and controls that go beyond what the standard frameworks require.

Capability	What SPUR does	Standard requirement	How SPUR exceeds it

Future direction & emerging frameworks

Emerging standards and regulations SPUR continuously evaluates for our customers, partners, and tenants.

Standard or regulation	Status	Outlook	SPUR posture

Future direction

SPUR continuously evaluates emerging standards and regulatory frameworks. Our position is to engineer to a level that meets and exceeds the leading frameworks first; formal third-party certifications can be pursued on a per-engagement basis where a customer or partner requires them.