None — SpinupWP does not charge initial setup fees
Maintenance Fees:
None mandatory — server updates and security patches are automated, but manual upgrades may require technical oversight
Training
Comprehensive Documentation: Step-by-step guides for provisioning servers, adding sites, and configuring WordPress.
Getting Started Tutorials: Walkthroughs for setting up your first server and migrating existing sites.
In-app Guidance: SpinupWP offers real-time suggestions and feedback during setup and configuration.
Professional Best Practices: Recommendations for server optimization, caching, and security hardening
Community Support: Access to forums and shared knowledge from other users.
Email Support: Available for troubleshooting and account-related queries.
Referral Program: Incentives for users to share SpinupWP with others, helping expand community learning
Security Measures
Automatic Security Updates: Servers are configured to install critical updates immediately using unattended-upgrades.
Firewall Configuration: Only allows SSH, HTTP, and HTTPS traffic; all other ports are blocked.
SSH Hardening: Root login is disabled; users must use sudo for elevated access.
Fail2Ban Protection: Prevents brute-force attacks on SSH by blocking repeated failed login attempts.
Site Isolation: Each site runs under its own system user and PHP-FPM pool to prevent cross-site contamination.
Free SSL/TLS Certificates: Automatically provisioned and renewed via Let’s Encrypt.
Nginx Security Headers: Includes HSTS, X-XSS-Protection, X-Frame-Options, and MIME sniffing prevention.
Optional Features: Disable PHP execution in uploads folder and XML-RPC to reduce plugin-related vulnerabilities.
Encrypted App Access: AES-256 encryption, off-site SSH key storage, and two-factor authentication for dashboard access.
Updates
Security Updates: Installed automatically as soon as they’re available to minimize vulnerabilities.
Non-Security Updates: Must be installed manually via SSH using sudo apt update && sudo apt upgrade.
Reboot Notifications: If a security update requires a reboot, SpinupWP sends an email and dashboard alert.
Manual Reboot Control: Servers do not reboot automatically to avoid downtime; users are advised to reboot during off-hours.
Dashboard Notices: SpinupWP flags outdated packages and provides upgrade guidance.
Canonical Livepatch Option: Reduces reboot frequency by applying kernel updates without restarting the serve
Data Ownership and Portability
Customer retains full ownership of all data stored or managed via SpinupWP services.
Data portability is supported: Users can export or migrate their WordPress sites and server configurations at any time.
No vendor lock-in: Since SpinupWP provisions servers on third-party providers (e.g., DigitalOcean, AWS), users can move their infrastructure independently.
Encrypted access: SSH keys and credentials are stored securely and can be revoked or transferred.
Compliance with GDPR and CCPA: SpinupWP requires explicit user consent for data handling and ensures secure processing.
Scaling Up / Down
Add or remove servers anytime: SpinupWP allows users to provision or decommission servers as needed.
Pricing scales with usage: Additional servers start at $1/month, and volume discounts apply.
Team expansion: Add users for $2/month each; remove them when no longer needed.
Site monitoring and backup options: Can be added or removed based on operational needs.
No long-term commitment: Monthly billing allows for flexible scaling without contractual penalties.
The terms & conditions for contract renewal and cancellation
Monthly subscription model: Users are billed monthly and can cancel anytime without penalty.
Automatic renewal: Subscriptions renew unless explicitly canceled before the billing cycle ends.
Cancellation process: Users can terminate via dashboard or support; services end at the close of the billing period.
No refund for partial months: Once billed, the month runs its course unless otherwise stated.
Material changes to terms: SpinupWP provides written notice; continued use implies acceptance.
Beta services disclaimer: Experimental features may be removed at any time without breach of contract.
End-of-life components: If a service feature is retired, SpinupWP may replace it but is not obligated to do
Compliance
GDPR (General Data Protection Regulation): Ensures user data rights, consent, and secure processing for EU customers.
CCPA (California Consumer Privacy Act): Protects personal data and transparency for California-based users.
Best practices in data governance: Includes encryption, access control, and breach notification protocols.
Fail2Ban and firewall security: Helps meet technical safeguards required by privacy laws.
No formal certifications listed: SpinupWP does not currently claim ISO, SOC 2, or HIPAA compliance.
