SOC 1-Compliant Infrastructure & Cloud Vendors
Infrastructure & Cloud vendors are evaluated against SOC 1 when they handle the workflows this framework governs. Currently, 7 vendors in our Infrastructure & Cloud category hold SOC 1 certification. Each listing below links to the vendor's full compliance profile.
Infrastructure & Cloud vendors that hold SOC 1 certification
Google Cloud Platform
23/32Google's suite of cloud computing services running on the same infrastructure Google uses for its products.
Microsoft Azure
23/32Microsoft's cloud computing platform for building, deploying, and managing applications and services.
Amazon Web Services
21/32On-demand cloud computing platforms (IaaS/PaaS) offering compute, storage, and managed services.
DigitalOcean
10/32Cloud infrastructure provider offering compute, storage, and networking services for developers and startups.
Heroku
7/32Cloud platform-as-a-service (PaaS) for deploying and running applications, owned by Salesforce.
Firebase
7/32Google's app development platform (backend, database, hosting, analytics).
PlanetScale
4/32Managed MySQL-compatible serverless database platform.
These infrastructure & cloud vendors do not currently hold SOC 1 certification:
- Cloudflare
- Vercel (not documented)
- Netlify (not documented)
- Linode (not documented)
- Vultr (not documented)
- Fastly (not documented)
- Akamai (not documented)
- Elasticsearch (not documented)
- Redis Cloud (not documented)
- Backblaze (not documented)
- Carbonite (not documented)
- Acronis (not documented)
- Veeam (not documented)
- Druva (not documented)
- Rubrik (not documented)
- Wasabi (not documented)
- Render (not documented)
- Railway (not documented)
- Fly.io (not documented)
- Kinsta (not documented)
- WP Engine (not documented)
Know a vendor we're missing?