SOC 2-Compliant Infrastructure & Cloud Vendors (2026)

SOC 2-Compliant Infrastructure & Cloud Vendors

Infrastructure & Cloud vendors are evaluated against SOC 2 when they handle the workflows this framework governs. Currently, 26 vendors in our Infrastructure & Cloud category hold SOC 2 certification and 2 hold it partially or conditionally. Each listing below links to the vendor's full compliance profile.

Infrastructure & Cloud vendors that hold SOC 2 certification

Google Cloud Platform

23/32

Google's suite of cloud computing services running on the same infrastructure Google uses for its products.

Microsoft Azure

23/32

Microsoft's cloud computing platform for building, deploying, and managing applications and services.

Amazon Web Services

21/32

On-demand cloud computing platforms (IaaS/PaaS) offering compute, storage, and managed services.

Cloudflare

20/32

Global CDN, DDoS mitigation, DNS, Zero Trust, and edge computing services delivered over Cloudflare's network.

Vultr

12/32

Cloud infrastructure provider (VPS, bare metal, GPU compute) for developers.

SOC 2+ with HIPAA

Redis Cloud

12/32

Fully managed in-memory database and caching service.

Vercel

10/32

Frontend cloud platform for deploying and scaling web applications, built on AWS infrastructure.

DigitalOcean

10/32

Cloud infrastructure provider offering compute, storage, and networking services for developers and startups.

Veeam

10/32

Data backup, recovery, and cyber resilience software.

Netlify

9/32

Web development platform for building, deploying, and scaling modern websites and applications.

Rubrik

9/32

Data security and cyber resilience platform (backup, ransomware recovery).

Elasticsearch

8/32

Search and analytics engine, offered as Elastic Cloud.

Druva

8/32

SaaS-based data resiliency and backup platform.

Heroku

7/32

Cloud platform-as-a-service (PaaS) for deploying and running applications, owned by Salesforce.

Firebase

7/32

Google's app development platform (backend, database, hosting, analytics).

Acronis

6/32

Cyber protection platform combining backup, disaster recovery, and security.

Wasabi

6/32

Cloud object storage service.

Fastly

5/32

Edge cloud platform for CDN, security, and edge compute.

Backblaze

5/32

Cloud storage and backup service (B2 Cloud Storage, Computer Backup).

PlanetScale

4/32

Managed MySQL-compatible serverless database platform.

Render

4/32

Cloud application hosting platform (PaaS).

Kinsta

4/32

Managed WordPress, application, and database cloud hosting platform.

Railway

3/32

Cloud application deployment platform (PaaS).

Carbonite

2/32

Cloud backup and data protection software, part of OpenText.

Fly.io

2/32

Application hosting platform for deploying apps close to users globally.

WP Engine

2/32

Managed WordPress hosting platform.

Akamai

1/32

Content delivery network (CDN), edge security, and cloud computing platform.

Referenced in third-party compliance directories and Akamai's own glossary content; no single first-party certificate list page confirmed in this pass

Linode

0/32

Cloud infrastructure and compute platform, now part of Akamai (Akamai Connected Cloud).

Referenced in Linode community/support posts; official standalone Linode trust page not confirmed post-Akamai integration

Know a vendor we're missing?

Submit it