ISO/IEC 27001
Planned work: define the information security management scope, assess risks, document controls and evaluate independent certification readiness.
No certification or audit date is committed.
About the ISO/IEC 27001 standard ↗Clear evidence. Informed decisions.
Review our security controls, current assurance status and roadmap before you deploy a regulated workload.
Our current assurance status
HiokCloud does not currently publish an ISO/IEC 27001 certificate or a SOC 2 report. The roadmap below describes planned assurance work, not completed audits or certification.
Standards & assurance
Status you can evaluate
SOC 2
Planned work: map controls and supporting evidence to the Trust Services Criteria, then scope an independent examination with a qualified auditor.
No Type I or Type II report is currently published.
About SOC examinations ↗Privacy & data handling
Review our privacy policy, regional placement and cross-region account metadata before assessing your regulatory obligations.
A platform feature or policy alone does not establish your workload's compliance.
Read the privacy policy →Available today
Controls and their scope
Access & network controls
Resource authorization and virtual-network isolation help you control access. Configure identities, permissions and network rules for your workload.
Explore the documentation →Regional placement
Hosted workload regions are Canada and France. Account and platform registry metadata are held in both regions; review this separately from resource content.
See the residency map →Encryption coverage
Coverage varies by resource. Existing VM and managed-database volumes are not yet encrypted by the platform. Review the published limits before storing sensitive data.
Encryption coverage and assurance →Availability & incident reporting
All hosted services share the 99.9% monthly availability SLA. Use the documented support channels to report incidents.
Read the SLA →Assurance roadmap
- DocumentDefine scope, responsibilities, asset inventory, risks and control evidence.
- AssessReview gaps, validate recovery procedures and evaluate independent audit readiness.
- VerifyEngage assessors when ready; publish verified scope and outcomes when available.
These steps are planned. No auditor appointment, completion deadline or certification is claimed.
Enterprise due diligence
Talk to the team →Bring your requirements.
Discuss region boundaries, support coverage and available security evidence with our team.