Email business@useghost.me with a brief description of what you need. Include your timeline if you have one, the team that is sponsoring the request, and any constraints (data residency, certifications, contract templates) we should know about up-front. We reply within one business day and route the request to the operator best placed to handle it — not to a sales triage queue.
What we get a lot of
- Security questionnaires. We maintain a current SIG Lite, CAIQ v4, and an internal master questionnaire that pre-fills ~85% of the typical enterprise security review. Send us your format and we will return it within two business days.
- Master Services Agreement reviews. We accept your paper for deals at or above our standard annual commit. For mid-market deals we usually start from our MSA; we redline both ways within a week.
- Data Processing Agreement and Standard Contractual Clauses, including UK IDTA Addendum, for any customer processing personal data of EU/UK/Swiss data subjects. See /dpa for the standard text.
- Sub-processor approvals — including our current list, change-notification cadence, and right to object.
- Certification artifacts — SOC 2 Type II report, ISO 27001 statement of applicability, penetration-test executive summary, vulnerability-management policy. We ship these under NDA; send a signed mutual NDA or use ours.
- Custom data residency — EU (Frankfurt) is our default; US (Northern Virginia) is available; APAC is on the 2026 roadmap. Region is set at provisioning and immutable.
- Insurance, indemnity, and audit-rights questions — our defaults are documented in the MSA; bespoke terms are handled by Legal, not Sales.
- Press, analyst, and research inquiries — please use press@useghost.me instead so our analyst-relations team sees it.
How long things take
We are deliberate about turnaround targets and write them into every engagement. Security questionnaires: two business days. MSA redlines: five. DPA execution: same-day once both parties have signed the MSA. Pilot kickoff after contract signature: ten business days, including SSO/SCIM setup and population import.
Who you will be talking to
Business inquiries are handled by named operators — typically a Solutions Engineer and either our Head of Legal or Head of Security depending on the request. Sales is involved only after the technical and contractual review is clear, which most procurement teams tell us is the inverse of every other vendor they deal with. We think it works better that way.