Register

What is SOC 2?

SOC 2 (System and Organization Controls 2) is a leading information security compliance framework developed by the American Institute of CPAs (AICPA). SOC 2 assesses an organization’s controls related to five trust service criteria: Security, Availability, Processing Integrity, Confidentiality, and Privacy.

SOC 2 is especially important for service providers that manage sensitive or regulated data in the cloud, as it provides assurance—through independent audit—that robust controls and processes are in place to protect customer information.

As a cloud provider operating globally, Exoscale’s SOC 2 compliance demonstrates that we meet stringent U.S. and international expectations for secure, reliable, and confidential cloud operations. Our SOC 2 Type 2 report—available in the Compliance Center—shows how our controls operate effectively over time, giving customers transparency and trust in our services.

FAQ

What’s the difference between SOC 1 and SOC 2?

  • SOC 1 focuses on controls relevant to financial reporting, mainly for organizations whose services could impact their clients’ financial statements.
  • SOC 2 evaluates non-financial controls around Security, Availability, Processing Integrity, Confidentiality, and Privacy—making it the key framework for cloud and SaaS providers managing sensitive or regulated data.
Exoscale

Contact our Compliance Team

Need more information about SOC 2 or access to our latest report? Contact our Compliance Team for documentation, guidance, or answers to your compliance questions.