Crusoe

Since 2018, our mission has been underpinned by a commitment to secure computing our customers can trust. With that, we're pleased to share that Crusoe Cloud has renewed its SOC 2 Type II attestation, now covering both our AI Cloud Infrastructure-as-a-Service and Managed AI Services, including Managed Inference. Governed by the AICPA, a SOC 2 Type II report gives customers independent assurance that our controls are not only well-designed, but consistently implemented and operating effectively over time. This examination covered May 1, 2025 to April 30, 2026 and evaluated controls relevant to security, availability, and confidentiality across our full platform, including Managed Inference and the Crusoe Intelligence Foundry. Security has always been at the forefront of how we design, build, and operate at Crusoe, and we'll continue to pursue regular examinations and new initiatives that raise the bar for our program. Access our latest report and stay up to date by visiting our Trust Center.

To support the launch of Crusoe Command Center, we are introducing Svix, Inc. as a new subprocessor. Svix will enable webhook and Slack-based notifications about your Crusoe Cloud resource health and system events to your designated endpoints. Svix will process information about your Crusoe Cloud resources (such as VM names and disk names), event details, organization identifiers, and information about the webhook and/or Slack endpoints you configure. As we expand Command Center capabilities in the future, Svix may also process identifiers associated with your Crusoe Cloud users. Svix does not access your Customer Data (data you upload to or process through Crusoe Cloud resources). As part of our standard subprocessor vetting process, Crusoe’s privacy and security teams conduct thorough evaluations of Svix security posture and ensure that robust data processing agreements are in place to safeguard your information. Svix processes data primarily in the United States using AWS infrastructure. Svix maintains SOC 2 Type II certification and implements enterprise-grade security controls including encryption in transit and at rest, access controls, and 24/7 monitoring. For more information about Svix's security practices, visit https://www.svix.com/security/.

Crusoe is proud to announce that we have achieved ISO 27001 and ISO 42001 certifications. Awarded by Schellman following independent external audits, these certifications reinforce our commitment to strong security, robust governance, and ethical innovation. While ISO 27001 establishes the foundation for our information security practices, ISO 42001 recognizes Crusoe's leadership in AI governance. We operate in the unique dual role of both an AI provider and an AI user, ensuring comprehensive accountability across our operations. ### What This Means for You For our customers and partners, these certifications provide independent validation of our security and governance frameworks. #### ISO 27001: Information Security Management This certification covers our entire Cloud Platform (IaaS, PaaS, and SaaS) and Managed Inference services. It validates that we have implemented an Information Security Management System (ISMS) with controls designed to maintain confidentiality, integrity, and availability of customer data. #### ISO 42001: Responsible AI Governance As early adopters of ISO 42001—the first international standard for AI Management Systems—we govern AI across two dimensions: - As an AI Provider: We ensure our Managed Inference Service and other AI offerings are safe, unbiased, and responsibly designed, developed, and delivered to our customers. - As an AI User: We govern…

Crusoe Cloud, an intuitive and highly scalable platform built for next-generation AI workloads has successfully renewed its SOC 2 Type II attestation for 2025. What This Means Our commitment, collectiveness, and innovation were key to our journey in renewing our SOC 2 Type II certification 2025.This key milestone provides assurance to customers that the Crusoe Cloud controls are not only well-designed, but are also consistently implemented and operating. Looking Ahead Security has always been at the forefront of how we design, build, and operate at Crusoe and receiving this attestation is a recognition of that commitment. Crusoe will continue to perform regular SOC 2 examinations and pursue additional security and compliance initiatives that raise the bar for our program and meet our customers’ needs. Customers and prospects can access our latest SOC 2 report and stay informed on the latest Crusoe Cloud security and compliance updates by visiting our Trust Center. As we move forward, we remain committed to enhancing our security measures, improving our services, and, most importantly, earning and maintaining the trust of our customers and partners.

Since our inception in 2018, Crusoe has been on a mission to align the future of computing with the future of the climate. Our dedication to this mission is underpinned by our commitment to building and operating secure computing that our customers can trust and which enables them to achieve their own missions. We understand that conveying trust is inherently difficult, so we continuously look at industry-standard compliance certifications and attestations to demonstrate our progress through independent scrutiny. With that, we are pleased to share a notable compliance milestone – Crusoe Cloud has successfully completed our SOC 2 Type II attestation. What This Means SOC 2 reports, governed by the American Institute of Certified Public Accountants (AICPA), are the de facto standard for customers to obtain assurance on the controls in place at service organizations for scoped Trust Services Criteria. In December 2023, Crusoe underwent a SOC 2 Type I examination that assessed the design of controls at a specific point in time; however, the SOC 2 Type II audit evaluated the operational effectiveness of our controls over a period of time. The comprehensiveness of the Type II attestation provides assurance to customers that the Crusoe Cloud controls are not only well-designed, but are also consistently implemented and operating. Looking Ahead Security has always been at the forefront…