Trust Center

Our trust posture.

Cloudgenics holds itself to the same standards we deliver to customers. Below is the current public summary of our security, compliance and operational posture.

Certifications & attestations

Independently assessed.

ISO/IEC 27001:2022 information security management
ISO/IEC 27017 cloud security and 27018 PII in public cloud
SOC 2 Type II covering security, availability and confidentiality
IRAP-assessed PROTECTED for sovereign Australian deployments
FedRAMP Ready (in progress) for US federal customers
UAE SIA / NESA assessment-aligned operational baseline

Internal security practices

How we run our own platform

Zero trust workload-to-workload identity inside our control plane
Hardware-rooted signing for every image we publish
Quarterly red-team and continuous purple-team exercises
Customer data segregation with tenant-level isolation
24/7 SOC monitoring of our own production estate
Documented incident response with public post-mortem commitment

Customer rights

What you can always ask for.

Evidence on demand

Request the current evidence pack for your subscribed frameworks at any time.

Sub-processor list

Current sub-processor inventory with notification rights for changes.

Vulnerability disclosure

Coordinated vulnerability disclosure program — please get in touch.