This overview summarizes the current PluraSpace architecture and operational approach at a high level. It is informational and does not create a separate service-level commitment, certification, or warranty.

1. Hosting and Data Residency

PluraSpace production services, the production database, and backups are hosted in Microsoft Azure in Canada, using the Canada Central and Canada East regions. Some third-party services may process limited information outside Canada as described in the Privacy Policy.

2. Microsoft 365 Integration

PluraSpace is registered or authorized as an application against the customer's primary Microsoft 365 tenant. Microsoft Graph is used to retrieve information necessary for room-booking and related functionality. PluraSpace does not store Microsoft authentication credentials or tokens in its application database.

3. Data Minimization

• PluraSpace does not provide general-purpose file or document storage.

• The application does not intentionally store user phone numbers, billing addresses, country/region, or general device/browser profiles.

• Billing, invoicing, payment-card information, and billing addresses are handled by Stripe.

• PluraSpace stores only the account, organization, booking, configuration, and audit information reasonably required for the service.

4. Monitoring and Auditability

PluraSpace uses standard Microsoft Azure monitoring and telemetry tools for application performance, diagnostics, and error monitoring. PluraSpace also keeps an audit log of key administrative actions such as user management, settings changes, and administrator changes.

5. Support Information

Support requests are handled in Pluragon's ticketing system, currently SuperOps, rather than stored as general content within the PluraSpace application.

6. Artificial Intelligence

PluraSpace may use Azure OpenAI, OpenAI, and Anthropic behind the scenes for internal product functions. Customer content and booking data are not sent to these AI providers, and PluraSpace Customer Data is not used to train AI models.

7. Backups and Retention

PluraSpace backups are stored in Microsoft Azure in Canada. Space data may be retained for up to 90 days after subscription lapse or failed renewal, or up to 30 days after intentional administrator deletion, to support reactivation or recovery. Active service data is then scheduled for deletion, subject to limited legal, security, fraud-prevention, tax, dispute, and normal backup-lifecycle requirements.

8. Availability and Maintenance

PluraSpace does not currently provide a formal uptime guarantee or SLA. Scheduled maintenance may temporarily affect availability. Advance notice is provided where reasonably practical.

9. Security Reporting

Security concerns or suspected vulnerabilities may be reported to info@pluragon.com. Please do not include unnecessary sensitive information in the initial report.

10. Security Changes

Pluragon may update security controls and architecture as PluraSpace evolves. Material changes affecting published privacy or contractual commitments will be reflected in the applicable legal documentation.