Spaceship
Connect Spaceship to Safeguard: what it provides, how to set it up, and the frameworks it provides evidence for.
Connect Spaceship to collect cloud infrastructure evidence with automated compliance tests, switched on per workspace.
| Category | Cloud Infrastructure |
| Connect with | API token |
| What a connection produces | Automated compliance tests |
| Spaceship's guide | docs.spaceship.dev |
Connect with an API token
-
In Spaceship:
- In your Spaceship account, open the API Manager and select New API key.
- Follow the setup guide and grant only the read-only scopes domains:read and dnsrecords:read.
- Copy the API key and the API secret. After the key setup has been successful, the key appears on the API Manager page.
Where to find the other values:
- API key: Listed on the API Manager page after setup.
Source: docs.spaceship.dev, checked 2026-10-07.
The permissions Safeguard needs:
domains:read,dnsrecords:read. Create the key in Spaceship's API Manager (spaceship.com › API Manager › New API key) with only the domains:read and dnsrecords:read scopes, both read-only, then paste the key and its secret. Spaceship's API does not show DNSSEC, the account's two-factor authentication or who can sign in: Safeguard checks DNSSEC through the public DS record, and the other two are attested. -
On Compliance › Connectors, open Spaceship, click Connect, choose API token and fill in:
Field What to enter API key Required. Stored encrypted and never shown again. API secret Required. Stored encrypted and never shown again. -
Click Connect with token.
Frameworks
Safeguard's automated tests read Spaceship and map to the controls below. When a test passes, the result is evidence toward each control it maps to, in every framework listed. It is evidence toward a control, not proof that the control is met on its own.
| Framework | Evidence | Controls | Tests |
|---|---|---|---|
| SOC2 | Automated tests | A1.2, CC6.1, CC6.2, CC6.3, CC6.6, CC6.7, CC7.1 | 11 |
| ISO/IEC 27001 | Automated tests | A.5.14, A.5.15, A.5.18, A.5.30, A.5.34, A.8.5, A.8.9, A.8.20, A.8.24 | 11 |
| HIPAA Security Rule | Automated tests | 164.308(a)(3), 164.312(d), 164.312(e)(1) | 3 |
| PCI DSS | Automated tests | 5.4.1, 7.2.4, 8.4.2 | 3 |
| NIST CSF 2.0 | Automated tests | DE.CM-09, PR.AA-03, PR.AA-05, PR.DS-01, PR.DS-02, PR.IR-03 | 11 |
These tests are switched on per workspace by the Safeguard team.
Related
- Cloud Infrastructure connectors
- Compliance connectors: how connecting works, card statuses and multiple accounts
- Connector setup reference: every connector in one table
- Frameworks and connectors: how connectors provide evidence for frameworks