Policy Updates
Last updated
Every Instatus policy shows the date it was last updated. This page records what changed, newest first. We email account owners before material changes take effect, as described in our Terms of Service. To get subprocessor changes by email, see our subprocessors page.
October 16, 2026
- Privacy Policy: the Cookies section now describes our cookie choices. Our websites and dashboard ask visitors from the EEA, UK and Switzerland before using analytics or marketing cookies, honor Global Privacy Control, and have a Your privacy choices link to change your choice at any time.
October 15, 2026
A full review of our policies so they match how Instatus works today and answer what legal and procurement teams ask for.
- Terms of Service: rewritten as a business agreement, with numbered sections, mutual confidentiality, warranties, indemnities and a liability cap, Order Form precedence, 30 days' notice of material changes, Paddle as Merchant of Record, AI and beta features, and Delaware governing law.
- Data Processing Addendum: now a web page that applies to every customer automatically. It covers GDPR, UK GDPR, Swiss FADP, the CCPA and other US state laws, and LGPD, and includes the 2021 EU Standard Contractual Clauses, the UK Addendum, 48-hour breach notification, audit rights and a no-AI-training commitment. It replaces the June 2022 DPA.
- Subprocessors: updated to our current providers, with purposes and locations. Added Hetzner, ClickHouse, Redis, Temporal, Backblaze, Cloudinary, SimpleBackups, Cloudflare, Expo, Anthropic, Google (Gemini API), Urlbox, Help Scout, hCaptcha, PostHog and Bugsnag. Removed Sentry and Google Analytics, which don't process customer data (Google Analytics is covered in our Privacy Policy).
- Privacy Policy: rewritten to explain our controller and processor roles, legal bases, cookies, retention, AI features, international transfers, and rights under EU, UK, US state and other laws.
- Acceptable Use Policy: new.
- SLA: clarified how uptime is measured, exclusions and how credits are applied. Commitments are unchanged.
- Security overview and whitepaper: updated to reflect encryption at rest, multi-AZ databases, our access controls and current infrastructure.
- GDPR, Refund, Cancellation, Copyright and Ownership policies: updated to match.