HotCodePush for enterprises

Enterprise terms for teams that need them: a 99.9 % SLA, single sign-on, direct invoicing, a DPA and an account manager, from the team that runs live updates at scale.

Enterprise terms

The Enterprise terms

The SLA, single sign-on and the DPA come with every paid plan. An Enterprise contract adds invoicing, an account manager and longer retention.

  • SLA with credits

    A 99.9 % monthly SLA on update delivery and the control plane, each measured separately on the public status page. Miss it, and your invoice carries a credit.

    Open the status page
  • Single sign-on

    Your identity provider signs your team in, with a verified domain and just-in-time members. It comes with every paid plan, so there is no SSO tax.

    See the plans
  • Custom invoicing

    Invoices come from us, not the self-serve checkout, with purchase orders and your own contract terms. All below an Enterprise deal stays fully self-serve.

    Contact sales
  • DPA

    A data processing agreement is in every customer’s terms; no need to ask. The subprocessor list sits next to it, and custom terms are part of the deal.

    Read the DPA
  • Account manager

    A named contact who knows your setup, Premium Support, and one security questionnaire answered once, then reused, so no review ever starts from zero.

    Contact sales
  • Longer retention

    Every plan keeps unused bundles for a fixed window. An Enterprise term sets a longer one for your organization, and the latest served update is never deleted.

    How data is kept

Governance

Rollouts you can govern

Protected channels, a complete audit log and webhooks keep every release accountable to your process.

  • Protected channels only admins can change

  • Every action in the audit log, exportable as CSV

  • Webhooks to Slack, Teams and Discord

An audit log with three entries, the last one an automatic pause, beside the Slack message that reports release 43 paused on production

Security review

Built for your security review

The answers your security team asks for, each with its docs page.

  • Single sign-on

    Sign your team in through your identity provider on every paid plan, with a verified domain and just-in-time members. There is no SSO tier and no extra fee.

    Read the docs
  • Keys only you hold

    Code signing uses a private key that never reaches HotCodePush. Each device checks the downloaded bytes with your public key before applying an update.

    How signing works
  • Audit log with export

    Every mutation is recorded with who did it, which credential and from where. Read it in the console or download the whole log as CSV for your auditors.

    See what is logged
  • Data stored in the EU

    The database, the file store, backups and analytics live in the EU. Devices send an anonymous id and no fingerprinting, and the subprocessor list is public.

    Privacy and device data
  • A public status page

    Two surfaces, update delivery and the control plane, are measured separately against a 99.9 percent SLA, and every incident is posted on the status page.

    Open the status page
  • Subprocessors, published

    Every third party that handles customer data is listed with what it does and where. The data processing agreement is part of every customer’s terms.

    See the subprocessors

Compliance

Privacy and data protection

SOC 2 and ISO 27001, audited every year and covering HotCodePush.

GDPR

GDPR

Personal data is processed in line with the GDPR and stored in the EU.

ISO 27001

ISO 27001

Audited every year and covering HotCodePush, run by the same team and stack as Capawesome.

SOC 2

SOC 2

Audited every year and covering HotCodePush; the report comes with the Enterprise conversation.

Trust

From the team behind Capawesome

Building for mobile developers since 2021: the same team, infrastructure and EU hosting that run Capawesome’s live updates.

teams trust us
1,000+
SLA on two surfaces
99.9 %
from init to the first update
< 60 s
data residency
EU

Figures as of October 27, 2026.

Procurement FAQ

The questions procurement asks

In the EU. The database runs in the EU, bundles and files sit in an EU-only storage region, and encrypted backups go to a second EU provider. A device is answered at the edge location nearest to it; what it reports is stored and backed up in the EU. Privacy and device data
Yes, and you do not have to ask: the data processing agreement is part of every customer’s terms, since device data is processed on your behalf. Custom contract terms are part of the Enterprise conversation. Data processing agreement
Yes. Enterprise invoices come directly from us, never through the self-serve checkout, and the plan renews by purchase order. Everything up to the spending cap stays self-serve, billed monthly. Contact sales
No. Single sign-on (OIDC) is on every paid plan, pay-as-you-go included; there is no SSO tax. SCIM directory sync and provider-initiated sign-in are Enterprise follow-ups, on request. Pricing

Talk to the team that built it.

A demo, a quote or the compliance package, within one business day.