We are looking at becoming SOC 2 compliant and I was curious if it is possible to leverage the compliance of a hosting provider as part of our attestation? More specifically, our product is fully hosted in Azure datacenters - which are SOC-2 compliant - on their platform as a service (PaaS) offerings. When it comes to infrastructure-related Trust Service Principals, would be be able to reference our host's compliance?

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Browse other questions tagged or ask your own question.