We strive to go above and beyond on cyber security compliance, surpassing industry standards and customer expectations to ensure our infrastructure leads the way in data protection best practice to provide peace of mind to over 5,000 organizations globally.
What is the CSA Level 2 STAR Certification?
The Security, Trust, Assurance, and Risk (STAR) Registry is a publicly accessible registry that documents the security and privacy controls provided by cloud computing providers.
Level 2 STAR Certification is a voluntary audit, expanding on other industry certifications and standards (specifically ISO 27001) and tailoring the requirements for cloud providers. STAR encompasses the key principles of transparency, rigorous auditing, and harmonization of standards outlined in the Cloud Controls Matrix (CCM).
Why is it important for us to attain the Level 2 STAR Certification?
Meeting the Level 2 certification requirements demonstrates our commitment to data protection and the professional development of employees to achieve cloud security competency - and is by no means an easy feat!
“The Cloud Security Alliance is the world’s leading organization dedicated to defining and raising awareness of best practices to help ensure a secure cloud computing environment. Zivver’s successful attainment of the CSA Level 2 STAR certification following an intensive third party audit, carried out by QSCert, demonstrates the team’s commitment to achieving cloud security competency, as well to the industry at large.” Lead Auditor QSCert
To achieve the certification, Zivver underwent an audit carried out by an independent third party. The assessment includes 217 separate controls across 17 different domains and is developed to rigorously test the security of a cloud service provider’s infrastructure and processes. From data mapping and encryption protocols to employee awareness and training, the Level 2 STAR Certificate evidences our ongoing commitment to data security best practice.
Find out more about our compliance accreditations and how we can support your organization to protect your most sensitive digital communications.