Dedicated Cloud is SOC 1 (SSAE 16 and ISAE 3402) and SOC 2 type II compliant

Montreal, 9 March 2015

Dedicated Cloud is SOC 1 (SSAE 16 and ISAE 3402) and SOC 2 type II compliant

Specializing in cloud and Internet infrastructures, the OVH Group’s Dedicated Cloud offer has been recently recognized as being in compliance with the international SOC 1 (SSAE 16 and ISAE 3402) and SOC 2 type II standards. The group continues its overall certification strategy to have its services recognized as conforming to best practices and international standards.

Security is critical for the OVH Group, which markets its private cloud solution to enterprises since 2010. While the SOC 1 and 2 type I compliance in 2014 pertained to putting in place procedures and controls to assure security and high availability of the Dedicated Cloud service, SOC 1 and SOC 2 type II are focused on the effectiveness and rigor of these procedures and controls.

An audit was conducted over a six month period, by the independent firm KPMG, concerning the Dedicated Cloud service in 4 of the group’s datacenters: 3 in France and 1 in Canada. The auditors evaluated and validated the controls managed by the group, on the following points:

• security policies;
• risk assessment and incident management;
• physical and logical access;
• service availability;
• data confidentiality and integrity.

"For our customers, these standards assure that we implement and rigorously follow, the internal controls and measures related to the security of our information systems," explains Thibaud Saudrais, in charge of quality assurance within the OVH Group.

About OVH Group

Founded in 1999, the OVH Group innovates at the heart of the Internet, data centers (200,000 physical servers) and network (3,500 Gbps). As a result, today it is a major player in the European cloud market. Through its brands, OVH.com, So you start, RunAbove, and hubiC, the OVH Group offers tools and solutions that are simple yet powerful, revolutionizing the way its 700,0000 worldwide customers work. Its credo is technology must serve business. Respect for the individual, freedom, and equal opportunity to access new technologies have always been and will be strong commitments of the company.