Hello again, does Ory Cloud has some external certifications such as ISO, SOC2 etc?

@famous-art-85498 and @fast-lunch-54279 might be able to assist here

Hi Sean, both ISO and SOC2 certification are in progress on our end, and we aim to have both finished this year.

May we ask what your use case is @bored-coat-26363? 🙂

We’re building a suite of products, and are using Ory. Ory Cloud is definitly our prefered choice in terms of deploy, it’s just that there are concerns (legal/CIO) in terms of “trust”, as we store PII (AFAIK Emails/password is a PII). Leaking data from Ory cloud is our main concern. (Also, I see in the cloud that the version is Alpha, not sure what it means for us. it makes me selling Ory Cloud internally a bit harder 🙂) We’re currently in early stages of our dev, and have yet to release production.

Thank you, that is extremely helpful. We are working hard towards GDPR, ISO and SOC2 compliance but as you know it takes its sweet time. The goal is to finish it this year though, it’s just making sure that we can tick all the check boxes regarding processes 🙂

Uff yes I know, I was on that side once. The intention is also important.