Regulatory Compliance

Being complacent about compliance could cost you

Upholding Enterprise-grade Security Standards with SOC 2 Compliance

Data, security, privacy, and confidentiality are words that you have probably been hearing a lot lately. Between the amount of data Google has on you, and the rows of personal details Facebook stores, data and the security of it is more important today more than ever before. You can trust that your Veeam, Zerto and Data Backups are secure and private. 

We as a company take the security of your data extremely seriously. Read on to learn why, and how our SOC 2 compliance ensures your data stays protected with enterprise-grade security standards.

SOC 2  Breakdown

SOC 2 was developed by the American Institute of CPAs (AICPA), and its reports define criteria for managing customer data based on 5 principles. The SOC 2 was created specifically for technology and cloud-computing organizations that want to assure their clients their information is secure.

SOC 2 reports are becoming increasingly more popular for SaaS and cloud service organizations, and are becoming a necessity to ensure data is being handled properly. A SOC 2 type2 certification is issued by outside auditors that assess the amount a company’s processes comply with the report’s 5 principles.


Importance of Data Security

With the number of sites we visit online and the number of actions we take without thinking twice, it should come as no surprise that our information is out there.

Cloudstar is SOC 2-compliant. This means that an external auditor assesses our processes on a regular basis to ensure that we comply with SOC 2 report’s Trust Service Principles.

There are 5 Trust Service Principles – Security, Availability, Processing, Confidentiality, Privacy – that are specific to the SOC 2 Report. AICPA refers to these as “a set of professional attestation and advisory services based on a core set of principles and criteria that address the risks and opportunities of IT-enabled systems and privacy programs.” The report requires specific alignment with the relevant principles provide valuable 3rd-party validation that the company is meeting all the criteria contained in the relevant principles.