Security and Certification

The internationally recognized SOC 2 standard is a set of compliance requirements verifying the security practices of service providers and other companies who store sensitive customer data in the cloud. To achieve compliance, Instaclustr underwent an independent technical audit to assess its policies and procedures in accordance with three trusted principles: Security, Availability, and Confidentiality.

While the Security trust principle is a mandatory component of the audit, Instaclustr chose to include the optional Availability and Confidentiality principles to further demonstrate to customers our strong data security capabilities.

With this designation, Instaclustr becomes the first—and currently the only—hosted Cassandra service provider to provide a security environment audited to meet the SOC 2 standards of the American Institute of Certified Public Accountants (AICPA).
Holding SOC 2 compliance is now part of Instaclustr’s formal security program, which includes regular independent penetration testing and participation in a bug-bounty program to encourage third-party reporting of potential security issues.

We offer the ability to create clusters that are PCI certified for Cassandra and Kafka on AWS. The PCI-DSS (Payment Card Industry Data Security Standard) is the payment card industry’s mandated information security standard and applies to all organizations that store, process, and/or transmit cardholder data. PCI-DSS certification requirements dictate that all system components either within the cardholder data environment or with access to it must feature specific and strict technical, physical, and operational security controls.