VNG Cloud has officially received its SOC 2 Type I report, confirming that its Cloud Services System meets the audit and evaluation requirements. The SOC 2 (System and Organization Controls) is one of the most globally recognized standards for data security and operational effectiveness, established by the American Institute of Certified Public Accountants (AICPA).
The examination was conducted by A-LIGN, a technology-enabled security and compliance firm trusted by more than 4,000 global organizations to help mitigate cybersecurity risks. Based on the Trust Services Criteria, the report validates that the company’s service commitments and system requirements align with two core criteria of Security and Availability.
A Strategic Milestone Affirming Secure and Available Cloud Services
SOC 2 is a key assessment that sets the benchmark for secure data handling and operational reliability, particularly relevant for IT and cloud service providers. To obtain this report, the company underwent a comprehensive assessment covering infrastructure, software, people, data, processes, policies and procedures.
To obtain this report, the company underwent a comprehensive assessment
Achieving the SOC 2 Type I report not only affirms the company’s operational excellence but also brings value to customers:
Comprehensive Data Security: Customer data and systems are safeguarded according to international standards, minimizing risks of unauthorized access or data leakage.
High Service Uptime: With a robust incident response process in place, potential disruptions are addressed promptly, ensuring smooth and continuous business operations.
Proactive Monitoring, Reliable Operations: The system is monitored 24/7 to detect anomalies in real time, maintaining top-tier service quality and a stable user experience.
VNG Cloud Commitment and Our Vision
This milestone reflects more than 18 years of sustained investment in infrastructure, service standardization, and operational excellence at VNG Cloud.
Sharing about this milestone, Tran Anh Nhan, Head of Engineering, VNG Cloud highlighted: "SOC 2 Type I is the result of our ongoing commitment today and lays a strong foundation for VNG Cloud’s long-term growth journey. In the next phase, we are working toward completing the SOC 2 Type II report — further affirming our ability to operate securely, reliably, and with sustained efficiency over time".
VNG Cloud has previously implemented and adhered to a range of international information security standards and domestic regulations, including ISO 27001, ISO 27017, ISO 27018, and PCI-DSS. The company is also committed to a 99.99% SLA for key cloud services.