NIS2Directive (EU) 2022/2555
Product-readyTRUST & SECURITY
Security without unsupported claims
CloudForge documents controls that are actually implemented. Framework support is not a certification.
Framework support
Austria NISG 2026BGBl. I Nr. 94/2025
PartialGDPR / DSGVORegulation (EU) 2016/679
PartialEU AI ActRegulation (EU) 2024/1689
Product-readyISO/IEC 27001:20222022
Reference mappingISO/IEC 27001:20132013
DeprecatedNIST Cybersecurity Framework 2.02.0
PartialDORARegulation (EU) 2022/2554
PartialCyber Resilience ActRegulation (EU) 2024/2847
PlannedNIST AI RMF 1.01.0
PartialISO/IEC 42001:20232023
Reference mappingISO/IEC 27017:20262026
Reference mappingISO/IEC 27018:20252025
Reference mappingCIS Controls 8.18.1
License requiredSOC 2TSP Section 100 (2022)
Product-readyBSI C5C5:2026 v1.0.1
Product-readyBSI C5:2020C5:2020 v1.0
DeprecatedTISAX / VDA ISAVDA ISA 6.0.3
Product-readyTISAX / VDA ISA 2027VDA ISA 2027
PlannedTechnical safeguards
EU data residency
Production and customer data for the current service are operated in the EU; customer-specific contractual commitments are documented separately.
Transport encryption
Public endpoints use HTTPS. Internal transport and certificate configuration are monitored operationally.
Tenant isolation
API access is constrained through organization context, roles and server-side tenant checks.
MFA for privileged roles
Platform and privileged organization roles require MFA and a verified session.
Auditable administration
Critical user, MFA, membership and organization changes are stored as audit events.
Secure delivery
Release contracts, type checks, tests, isolated preflights, health checks and controlled rollback are part of deployment.
Vulnerability disclosure
Found a security issue? Report it directly. We will acknowledge receipt as quickly as possible.
security@cloudforge.teamResponsible disclosure. Do not publish exploit details before a coordinated fix.