Crusoe: Crusoe Cloud Subprocessors
Captured current version, in full.
Crusoe Crusoe is a technology infrastructure company that uses clean energy to power our solutions. Our mission is to accelerate the abundance of energy and intelligence. We offer the latest accelerated compute technology from renowned providers including NVIDIA and AMD. Crusoe's cloud customers are running production training, inference, graphics, and high performance computing (HPC) workloads today. security@crusoe.ai Privacy Policy Opens in new tab Crusoe is a technology infrastructure company that uses clean energy to power our solutions. Our mission is to accelerate the abundance of energy and intelligence. We offer the latest accelerated compute technology from renowned providers including NVIDIA and AMD. Crusoe's cloud customers are running production training, inference, graphics, and high performance computing (HPC) workloads today. Compliance SOC 2 Type II GDPR CCPA ISO 27001:2022 ISO/IEC 42001:2023 Resources View all General Crusoe Cloud: Security and Compliance Brief Vulnerability Disclosure Policy Business Continuity and Disaster Recovery Plan.pdf Attestations & Certifications (2025) ISO 27001 Certificate (2026) ISO 42001 Certificate (2026) Crusoe Cloud SOC 2 Type II Report Penetration Test Results (2026) Crusoe Cloud Application and Infrastructure Penetration Test Attestation Implementation Guides Crusoe Cloud : HIPAA Implementation Guide ISO Statement of Applicability (SOA) ISO 27001 Statement of Applicability ISO 42001 Statement of Applicability Crusoe Cloud Security Advisories CCSA-2026-01 - cloud-hypervisor CCSA-2026-01 - Validation Report CCSA-2026-02 - cloud-hypervisor Controls Updated 8 minutes ago View all Infrastructure security Encryption key access restricted Unique account authentication enforced Production application access restricted View 6 more Infrastructure security controls Organizational security Asset disposal procedures utilized Code of Conduct Code of Conduct acknowledged by employees and enforced View 1 more Organizational security control Product security Control self-assessments conducted Vulnerability and system monitoring procedures established Internal security procedures Continuity and Disaster Recovery plans established Cybersecurity insurance maintained Development lifecycle established View 12 more Internal security procedures controls Data and privacy Data retention procedures established Data classification policy established Subprocessors View all Google Cloud Platform • Cloud service provider United States Mailgun • Transactional email United States Stripe • Payment processing United States Zendesk • Customer support United States Updates View all Compliance Crusoe Cloud renews SOC 2 Type II Attestation for 2026 Published June 18, 2026 Since 2018, our mission has been underpinned by a commitment to secure computing our customers can trust. With that, we're pleased to share that Crusoe Cloud has renewed its SOC 2 Type II attestation, now covering both our AI Cloud Infrastructure-as-a-Service and Managed AI Services, including Managed Inference. Governed by the AICPA, a SOC 2 Type II report gives customers independent assurance that our controls are not only well-designed, but consistently implemented and operating effectively over time. This examination covered May 1, 2025 to April 30, 2026 and evaluated controls relevant to security, availability, and confidentiality across our full platform, including Managed Inference and the Crusoe Intelligence Foundry. Security has always been at the forefront of how we design, build, and operate at Crusoe, and we'll continue to pursue regular examinations and new initiatives that raise the bar for our program. Access our latest report and stay up to date by visiting our Trust Center Opens in new tab . Read more Read more about Crusoe Cloud renews SOC 2 Type II Attestation for 2026 Privacy New Subprocessor Notification: Svix Published February 13, 2026 To support the launch of Crusoe Command Center, we are introducing Svix, Inc. Opens in new tab as a new subprocessor. Svix will enable webhook and Slack-based notifications about your Crusoe Cloud resource health and system events to your designated endpoints. Svix will process information about your Crusoe Cloud resources (such as VM names and disk names), event details, organization identifiers, and information about the webhook and/or Slack endpoints you configure. As we expand Command Center capabilities in the future, Svix may also process identifiers associated with your Crusoe Cloud users. Svix does not access your Customer Data (data you upload to or process through Crusoe Cloud resources). As part of our standard subprocessor vetting process, Crusoe’s privacy and security teams conduct thorough evaluations of Svix security posture and ensure that robust data processing agreements are in place to safeguard your information. Svix processes data primarily in the United States using AWS infrastructure. Svix maintains SOC 2 Type II certification and implements enterprise-grade security controls including encryption in transit and at rest, access controls, and 24/7 monitoring. For more information about Svix's security practices, visit https://www.svix.com/security/ Opens in new tab . Read more Read more about New Subprocessor Notification: Svix Compliance Crusoe Achieves ISO 27001 and ISO 42001 Certifications for Crusoe Cloud and Managed Inference Published February 3, 2026 Crusoe is proud to announce that we have achieved ISO 27001 and ISO 42001 certifications. Awarded by Schellman Opens in new tab following independent external audits, these certifications reinforce our commitment to strong security, robust governance, and ethical innovation. While ISO 27001 establishes the foundation for our information security practices, ISO 42001 recognizes Crusoe's leadership in AI governance. We operate in the unique dual role of both an AI provider and an AI user, ensuring comprehensive accountability across our operations. What This Means for You For our customers and partners, these certifications provide independent validation of our security and governance frameworks. ISO 27001: Information Security Management This certification covers our entire Cloud Platform (IaaS, PaaS, and SaaS) and Managed Inference services. It validates that we have implemented an Information Security Management System (ISMS) with controls designed to maintain confidentiality, integrity, and availability of customer data. ISO 42001: Responsible AI Governance As early adopters of ISO 42001-the first international standard for AI Management Systems-we govern AI across two dimensions: As an AI Provider: We ensure our Managed Inference Service and other AI offerings are safe, unbiased, and responsibly designed, developed, and delivered to our customers. As an AI User: We govern our internal use of AI-including in software development (SDLC) and customer support-to ensure ethical, transparent, and accountable implementation. About ISO 42001 ISO 42001:2023 is the first international standard for Artificial Intelligence Management Systems (AIMS). It provides a framework for organizations to responsibly develop, provide, or use AI systems-requiring documented policies, risk assessments, human oversight mechanisms, and continuous monitoring, all verified through independent external audits. Looking Ahead These certifications are a foundational step, not an endpoint. Crusoe is committed to the ongoing maintenance and evolution of both standards, ensuring that our responsible AI practices remain embedded across our technology stack, development lifecycle, and service delivery. As AI technology advances, so will our dedication to security, governance, and ethical innovation. For more details, you can find our public certificates in the Resources section of our Trust Center Opens in new tab . The ISO Statement of Applicability (SoA) is available upon request through our standard NDA process. Read more Read more about Crusoe Achieves ISO 27001 and ISO 42001 Certifications for Crusoe Cloud and Managed Inference Compliance Crusoe Cloud renews SOC 2 Type II Attestation for 2025 Published June 26, 2025 Crusoe Cloud, an intuitive and highly scalable platform built for next-generation AI workloads has successfully renewed its SOC 2 Type II attestation for 2025. What This Means Our commitment, collectiveness, and innovation were key to our journey in renewing our SOC 2 Type II certification 2025.This key milestone provides assurance to customers that the Crusoe Cloud controls are not only well-designed, but are also consistently implemented and operating. Looking Ahead Security has always been at the forefront of how we design, build, and operate at Crusoe and receiving this attestation is a recognition of that commitment. Crusoe will continue to perform regular SOC 2 examinations and pursue additional security and compliance initiatives that raise the bar for our program and meet our customers’ needs. Customers and prospects can access our latest SOC 2 report and stay informed on the latest Crusoe Cloud security and compliance updates by visiting our Trust Center Opens in new tab . As we move forward, we remain committed to enhancing our security measures, improving our services, and, most importantly, earning and maintaining the trust of our customers and partners. Read more Read more about Crusoe Cloud renews SOC 2 Type II Attestation for 2025