What we certify, how we isolate, where data lives.
Podstack Cloud runs on Podstack OS in partner data centers. The controls below apply to the managed cloud and to operators who licence the software.
What is certified and what is built in.
ISO 27001
Our information security management system is ISO 27001 certified, with independently audited controls across the platform and its operations.
Per-tenant isolation
Every tenant’s compute, storage and network are isolated by the Podstack OS control plane and the PodVirt virtualisation layer; fractional GPUs never share a tenant boundary.
Region pinning
Workloads and data can be pinned to a region, including in-India residency; US and EU regions are available where partner capacity exists.
Audit trails
Administrative and API actions are recorded, supporting compliance reviews and incident response.
DPDPA-ready architecture
Residency controls, purpose-scoped access and deletion workflows designed for India’s Digital Personal Data Protection Act.
SOC 2 Type II
A SOC 2 audit is on the active roadmap; this page is updated when the report is available.
HIPAA readiness
Planned as healthcare workloads grow; talk to us if it is a requirement for your team.
Why a region does not go dark.
The OS runs on every node
Health and utilisation are visible directly, not inferred from the outside, on every GPU in every partner facility.
More than one operator per region
A region is backed by several operators, so a workload fails over instead of going dark when one site has a problem.
Terms flow down
The uptime, response and penalty terms signed with a customer flow into the operator agreement behind it.
Where things run and who can see them.
| Item | Detail |
|---|---|
| Regions | US, EU and India, where partner capacity exists |
| Residency | Region pinning for workloads and data, including in-India residency |
| Tenancy | Per-tenant isolation via the Podstack OS control plane and PodVirt |
| Auditability | Audit trails on administrative and API actions |
| Deletion | Deletion workflows for tenant data on request and at contract end |
| Operators | The same controls apply on partner racks; uptime and response terms flow down into operator agreements |
| Platform | Identical software on the managed cloud and on licensed Podstack OS |
Report a vulnerability or ask about a control.
Write to the security contact with details; a person replies, usually within one business day. For customer questions about a specific control, ask through the contact form with the support purpose.
Questions, answered.
Which certifications does Podstack hold today?
Podstack is ISO 27001 certified, covering the information security management system, the platform and its operations; a SOC 2 Type II audit is in progress and HIPAA readiness is on the roadmap.
Can I keep my data and workloads in India?
Yes, workloads and data can be pinned to the India region, and US and EU regions are available where partner capacity exists.
How are tenants isolated from each other?
The Podstack OS control plane and the PodVirt virtualisation layer isolate each tenant’s compute, storage and network, and fractional GPU shares never cross a tenant boundary.
Do the same controls apply to partner data centers?
Yes, Podstack Cloud runs on Podstack OS inside partner facilities, so the isolation model and audit trails are the same, and the uptime and response terms a customer signs flow into the operator agreement behind them.
Do the controls apply if we licence Podstack OS ourselves?
Yes, an operator who licences DC Suite runs the same software Podstack operates, and inherits the same isolation and audit-trail architecture on their own hardware.