Snapshot 166742
Normalized text
Scripts and page chrome removed; this is what change detection compares.
We use cookies We use cookies to enhance your browsing experience, serve personalized content, and analyze our traffic. By clicking "Accept", you consent to our use of cookies. Read our Cookie Policy for more information. Trust Center Back to Home Trust Center Security, Privacy & Compliance Quick Links Privacy PolicyTerms of ServiceCookie PolicyData Processing Addendum At Cloudevolve, earning and maintaining your trust is our highest priority. This Trust Center provides transparency into how we protect your data, secure our platform, and maintain compliance with industry standards. Our platform is built on a read-only architecture — we never create, modify, or delete any resources in your cloud environment. Combined with encryption everywhere, least-privilege IAM, and independent SOC 2 Type II audits, Cloudevolve is designed so you can optimize your cloud costs without compromising on security. 99.97% Uptime (12 months) 0 Critical SOC 2 Findings 200+ Enterprise Customers 100% Read-Only Access Key Assurances 8 commitments These are the foundational commitments we make to every customer, from startups to large enterprises. Read-Only Architecture Cloudevolve operates on a strictly read-only architecture. We never create, modify, or delete any resources in your cloud environment. All IAM roles use least-privilege, read-only policies that are auditable in your own AWS, Azure, or GCP console. No Sensitive Data Storage We do not store, cache, or retain any of your proprietary business data, application payloads, or customer PII. The only data we process is cloud metadata — resource configurations, billing line items, and usage metrics — required to deliver cost optimization insights. Encryption Everywhere All data is encrypted in transit using TLS 1.3 (with TLS 1.2 backward compatibility) and at rest using AES-256 via AWS KMS with automatic annual key rotation. Database connections, API traffic, and inter-service communication are all encrypted end-to-end. SOC 2 Type I & Type II Certified Cloudevolve has achieved both SOC 2 Type I and SOC 2 Type II certification. Our controls are independently audited by a licensed CPA firm, covering the Security, Availability, and Confidentiality trust service criteria. IAM Least Privilege Every cross-account IAM role follows the principle of least privilege. We provide CloudFormation / Terraform templates that create narrowly scoped, read-only roles — no write, delete, or administrative permissions are ever requested. Comprehensive Audit Logging Every user action, API call, and system event within Cloudevolve is logged with immutable, tamper-evident audit trails. Logs are retained for 12 months and are available for export upon request to support your own compliance needs. 99.9% Uptime SLA Our platform is deployed across multiple AWS Availability Zones with automated health checks and failover. We back our reliability commitment with a contractual 99.9% uptime SLA for all enterprise customers. Transparent Incident Response We maintain a documented Incident Response Plan with 24/7 on-call engineering coverage. Customers are notified of any security incidents within 72 hours, and full post-mortem reports are published for material events. Explore by Category Dive deeper into each area of our trust and security posture. Security Enterprise-grade security built on a read-only architecture — we never modify your cloud resources. Privacy Minimal data collection, strict purpose limitation, and full data subject rights under GDPR and CCPA. Compliance SOC 2 Type I & II, ISO/IEC 27001, ISO/IEC 20000-1, ISO 22301, ISO 9001, PCI DSS, and GDPR — independently certified and audited. Infrastructure Multi-AZ AWS deployment with 99.9% uptime SLA, automated failover, and end-to-end encryption. Enterprise Security Reviews For detailed security documentation, SOC 2 Type II reports, penetration test summaries, or to schedule a security architecture review, contact our security team. security@cloudevolve.com Security Questionnaires Need to complete a vendor security questionnaire or CAIQ? We maintain pre-filled responses for SIG Lite, CAIQ v4, and custom questionnaires. We typically respond within 3 business days. Request questionnaire support → Security Contact security@cloudevolve.com We use cookies We use cookies to enhance your browsing experience, serve personalized content, and analyze our traffic. By clicking "Accept", you consent to our use of cookies. Read our Cookie Policy for more information.