CloudZero Achieves SOC 1 Compliance: Here’s Why We Did It

For most companies it’s difficult to organize cloud spend because it relies on manual effort, like tagging.

At CloudZero, we’re dedicated to helping customers make sense of their cloud investment without manual and repetitive work. Our code-driven approach to cost allocation makes it easy for customers to organize spend even if they have poor tagging, shared resources, or containerized infrastructure.

Quite simply, we organize cloud spend better than anyone else in the world.

When you’re in this game, though, the cost data you’re organizing better be secure — that’s table stakes. So last year, we completed our SOC 2 Type 2 audit — which ensures the safety and confidentiality of each customer’s data.

But then we took it a step further …

Today, I’m excited to announce CloudZero has completed SOC 1 Type 2 certification — a milestone no other cloud cost management or optimization provider has reached.

This means we’ve been third-party certified that our cost insights are accurate. We believe data accuracy for our customers is non-negotiable and SOC 1 compliance should be part of the buying criteria when choosing your provider.

Why Did We Do This, When No One Else Has?

When we spoke with cost practitioners at many companies, especially those who are public or in highly regulated industries, they were jumping through hoops and spending money to audit their cloud cost data and prove it was accurate.

In some cases, organizations we met were actually reporting on their costs a little higher than they needed to, because they couldn’t take the risk of underreporting them.

In essence, they were hurting their gross margins — and therefore their valuations, stock prices, etc. — in the name of data accuracy.

CloudZero has long had the ability to report on cloud cost by granular measures, like products, features, and customers. By taking this extra step, not only can we help customers report on the highest gross margin possible, but we can alleviate the pain of third-party auditing.

We’re thrilled to offer this differentiated certification to all of our existing and future customers.

If you are interested in cloud cost intelligence, backed by the seal of both SOC 1 and SOC 2 compliance, please reach out! We’d love to have a conversation about how we can help.

Author: Erik Peterson

Erik Peterson is the co-founder and CTO of CloudZero, is a software startup veteran, and has been building and securing cloud software for over a decade. Erik is a frequent speaker on FinOps, cloud economics, DevOps, and security.