Security Overview

Jul 25, 2024

Product Security

Product security is of paramount importance at CloudSaver. CloudSaver uses a software development lifecycle in line with general Agile principles. When security effort is applied throughout the Agile release cycle, security oriented software defects are able to be discovered and addressed more rapidly than in longer release cycle development methodologies. Software patches are released as part of our continuous integration process. Patches that can impact end users will be applied as soon as possible but may necessitate end user notification.

CloudSaver performs continuous integration. In this way we are able to respond rapidly to both functional and security issues. Well defined change management policies and procedures determine when and how changes occur. This philosophy is central to DevOps security and the development methodologies that have driven CloudSaver adoption. In this way, CloudSaver is able to achieve extremely short mean time to resolution for security vulnerabilities and functional issues alike. CloudSaver is continuously improving our DevOps practice in an iterative fashion.

SOC2® Type II

CloudSaver has an AICPA SOC2® Type II examination performed on an annual basis based on the trust services criteria relevant to security. The SOC2® Type II report validates the design and operating effectiveness of CloudSaver’s operational and security processes that support our SaaS solutions.

ISO 27001:2013

CloudSaver is ISO 27001:2013 certified. This certification is an internationally recognized standard for information security management systems that helps organizations protect their assets and data from potential threats. Its achievement demonstrates that CloudSaver has invested the time, technology, and resources to provide its clients with security consistent with international best practices.

GDPR

The General Data Protection Regulation (GDPR) is a set of rules adopted by the European Union (EU) and United Kingdom (UK) for the protection of personal data. CloudSaver adheres to the GDPR rules for the personal data we process. For more information on personal data processed, data subject rights, and contact information please see CloudSaver’s Privacy Policy.

Physical Security

The CloudSaver infrastructure is hosted in Cloud Service Provider (CSP) environments. Physical and environmental security related controls for CloudSaver production servers, which includes buildings and locks or keys used on doors, are managed by these CSP’s.

Corporate Security

CloudSaver individually authenticates users by way of a central identity provider and leveraging two factor authentication wherever possible.

All CloudSaver personnel undergo regular security and privacy awareness training that weaves security into technical and non-technical roles; all employees participate in securing our customer data and company assets.

In this article

Product Security
SOC2® Type II
ISO 27001:2013
GDPR
Physical Security
Corporate Security

FEATURE	BENEFIT
Tag Automation & Batch Tag Processing	Employ powerful automation to quickly and accurately tag cloud resources minimizing manual tasks and saving valuable time and effort. Reduce security vulnerabilities and human errors with accurate and swift tagging.
Real-time, Native Cloud Sync	Tag changes are reflected in real-time in native cloud service provider environments. Data is timely and accurate and can be leveraged with additional CloudSaver and third-party tools.
Tag Explorer Query Engine	Utilize our patented filtering and search technology for rapid and efficient location of client data across resources, zones, accounts, and service providers. This capability drastically reduces mean-time-to-resolution by quickly identifying key cloud data. Its deep dive, robust exploration enables you to “find anything.”
Tag Intelligence Dashboards & Tools	Benefit from a guided tag health experience that automatically delivers valuable insights without the need for customized reports or dashboards. These insights cover both your entire tag environment and also specific categories.
Customizable Dashboards	Create customized dashboards to display data according to your specific needs, offering real-time visibility into cloud resources, tags and spend. Obtain timely, accurate, and relevant data for insightful analysis and to identify tagging gaps.
Efficient Tag Remediation	Benefit from suggested, spell-checked tag keys and values – detect and batch merge tag variations.
Legacy Tagging Solutions	Retroactively tag or modify tags on existing legacy resources during cloud migration, either individually or in bulk and eliminate time-consuming manual efforts for smooth integration into your cloud environment.
Multi-Tenant & Multi-Cloud	Manage every cloud data set from a single screen across resources, zones, accounts, and cloud service providers (AWS and Azure).
Tag Policy Compliance Monitoring	Ingest tag policies from native cloud environments to ensure consistent tag syntax and taxonomy.
User Role & Permission Console	Enhance security with Identity and Access Management features contained in the permissions assigned through tagging.
Configuration Management Database (CMDB) Integration	The CloudSaver platform seamlessly incorporates CMDB data related to known cloud infrastructure, offering precise control, efficient tagging, and enhanced visibility by viewing, filtering, and sorting cloud resources based on CMDB data.