Trust Center

Everything a security, legal or procurement reviewer usually asks for, in one place: how we work inside your environment, how we handle data, which credentials you can verify, and how to get the documents you need.

Request our security answers Book a scoping call

Verified credentials Azure DevOps Engineer Expert Azure Administrator Associate Certified Kubernetes Administrator

How we work inside your environment

These are our standing engagement standards. They are written into the scope for every package and managed plan.

Your accounts and repositories

All work happens in cloud accounts, subscriptions and repositories that you own. We do not host your infrastructure or code on our own accounts.

Least privilege, time-bound access

We request the narrowest roles that let us do the agreed work, use your single sign-on where you have it, and ask for read-only access for reviews.

No shared credentials

Each engineer uses their own identity with multi-factor authentication. We do not use shared logins or long-lived keys.

Secrets stay out of code

Secrets live in a secrets manager or your vault. They are not committed to repositories, tickets or chat.

Reviewed changes

Changes are made through pull requests and your pipelines so every change is reviewed, attributable and reversible.

Clean exit

When an engagement ends we hand over documentation, remove our access and confirm that in writing.

Data protection and GDPR

We usually work in your cloud accounts, so personal data stays in the regions and systems you control. Where we may process personal data on your behalf, we act as a processor under a data processing agreement. We limit our access to personal data to what the agreed work needs.

Data processing agreement available on request during scoping.
No copying of production data to our own systems.
Data residency follows the cloud regions you choose, including EU regions.

For how we implement the technical controls behind GDPR, NIS2, DORA and SOC 2, see our compliance pages.

Credentials you can verify

Each credential links to the issuer's own verification page.

Microsoft Certified: DevOps Engineer Expert

Issued by Microsoft

Verify
Microsoft Certified: Azure Administrator Associate

Issued by Microsoft

Verify
Certified Kubernetes Administrator (CKA)

Issued by CNCF / Linux Foundation

Verify

Report a vulnerability

If you believe you have found a security issue affecting us or our website, contact us through the contact page and we will respond promptly.

Company details for procurement

Legal name: Cloud DevOps Solutions LLC
Registered: United States
Contract terms: Master services agreement and statements of work, drafted per engagement

Common questions from security and procurement

Do you hold SOC 2 or ISO 27001 certification as a company?

We do not claim a company-level attestation on this page. We implement the technical controls that SOC 2, ISO 27001, HIPAA and PCI-DSS expect inside your environment, and we hold the individual credentials listed here. We will state any company-level certification here once it exists.

Will you sign a data processing agreement?

Where we may process personal data in your environment we are happy to agree a data processing agreement. Ask for it during scoping.

Can you answer our security questionnaire?

Yes. Send it with your scoping request and we will answer it before any work starts.

Where is our data processed?

In the cloud regions you choose. We work in your accounts, so data stays where your environment keeps it, and we do not copy it elsewhere.