Quake AI: Compliance & Certifications
Quake AI: compliance & certifications
This page lists the compliance attestations Quake AI currently holds, and the regulatory frameworks it does not currently hold.
Sarbanes-Oxley (SOX)#
The Sarbanes-Oxley Act (SOX) is a U.S. law that applies to publicly traded companies and their financial reporting. It is not a certification that a cloud provider obtains: there is no SOX certification or validation for cloud service providers. If your organization is subject to SOX, you can use Quake AI's SOC 2 report to demonstrate controls over the infrastructure layer as part of your own SOX program. Request the report as described in the SOC 2 section below.
SOC 2 (type I & type II)#
Quake AI holds both SOC 2 Type I and SOC 2 Type II attestations:
- SOC 2 Type I: Covers whether the control environment is suitably designed at a specific moment.
- SOC 2 Type II: Covers whether those controls operate over an audit period.
These reports cover controls for security, confidentiality, availability, processing integrity, and privacy.
The report names the auditing firm and states the audit period. To request a copy under NDA, contact [email protected] and ask for the "Quake AI SOC 2 report".
SOC 3 report#
A SOC 3 report summarizes the SOC 2 controls for general distribution without revealing sensitive internal control details. To request a copy, contact [email protected] and ask for the "Quake AI SOC 3 Public Report".
Summary table#
| Attestation | Description |
|---|---|
| SOC 2 Type I | Assesses control design effectiveness at a specific moment |
| SOC 2 Type II | Reports operational effectiveness of controls over an audit period |
| SOC 3 Report | Shareable summary of the SOC 2 controls |
Not currently certified#
Quake AI does not currently hold the following certifications or attestations. If your workload requires any of them, account for the gap in your compliance planning. For questions about compliance scope, contact us at [email protected].
- HIPAA
- PCI DSS
- FedRAMP
- GDPR readiness
- ISO 27001
What these attestations cover#
- Third-party assurance: The SOC 2 attestation gives customers and partners independent verification of Quake AI's control environment.
- Shareable summary: The SOC 3 report provides a summary of the SOC 2 controls without exposing sensitive internal detail.
Contact us#
To ask about certifications or request copies of audit reports, contact us at [email protected]