Product News
Announcing CloudQuery’s SOC2 Certification!
We're thrilled to announce that we've completed our SOC 2 Type II audit! This is a major milestone for CloudQuery and represents months of dedicated work to ensure we meet the highest security standards for our customers.
What is SOC 2? #
SOC 2 (System and Organization Controls) is an auditing procedure from the American Institute of CPAs (AICPA) that checks how companies handle customer data. Type II certification looks at how well controls work over time, not just at one moment.
The audit looked at our controls in five areas:
- Security: Protection against unauthorized access
- Availability: System performance and uptime
- Processing Integrity: Complete and accurate data processing
- Confidentiality: Protection of sensitive information
- Privacy: Personal information handling
What This Means for CloudQuery Users #
For our customers, this certification provides:
- Verified Security Practices: Independent validation of our data protection standards
- Reduced Vendor Assessment Burden: Simpler compliance processes when evaluating CloudQuery
- Continuous Improvement: Ongoing enhancement of security protocols
- Trust and Transparency: Clear documentation of security controls
This matters most for organizations in regulated industries or those handling sensitive data.
Our Review and Audit Process #
As we mentioned above, SOC2 certification means that an external auditor has now deemed CloudQuery to have all the security controls in place to meet the AICPA’s criteria.
In practice, you as a CloudQuery customer, will not notice any changes. After all, we’ve always operated with a data-security-first approach. What you will gain with this certification is the knowledge that an external assessor has confirmed that everything is as it should be.
Looking Forward #
SOC 2 Type II certification is one step in our security journey.
We'll continue:
- Improving security measures
- Re-certifying regularly
- Expanding our compliance work
For more about our security practices you can also visit our Trust Center to view our compliance status and security information.