The Cloud Security Alliance
is a not-for-profit organization with a mission to “promote the use of best practices for
providing security assurance within Cloud Computing, and provide education on the uses of
Cloud Computing to help secure all other forms of computing.”
The CSA’s Security, Trust & Assurance Registry Program (STAR)
is a three-tiered cloud provider assurance program that consists of a self-assessment,
third-party audit, and continuous monitoring, designed to aid customers with their assessment
of cloud service providers.
Google is a CSA sponsor and a member of CSA’s International Standardization Council
(ISC). The ISC is chartered with coordinating all aspects of the standardization effort in CSA.
Google Cloud (G Suite and the Google Cloud Platform) has achieved the third-party
assessment-based certification (CSA STAR Level 2: Attestation). The Google Cloud Platform CSA
Star SOC2+ report and the G Suite CSA Star SOC2+ report are available to customers under NDA.
You can download the STAR Attestation documents from the CSA website.