Apple Releases Private Cloud Compute SOC 3 Audit Reports for Enterprise Trust
Apple Private Cloud Compute SoC 3 audit reports
I am sharing the latest Apple Private Cloud Compute SOC 3 audit reports, which validate the security and confidentiality of our provisioning system. These independent examinations cover rolling 12-month periods, ensuring our controls meet strict AICPA trust criteria. While these reports confirm the integrity of our cloud infrastructure, they explicitly do not evaluate the performance of Apple Intelligence services.
The examinations were not conducted to evaluate the performance or integrity of Apple’s artificial intelligence services.
- arkadiyt
For anyone unaware, a SOC3 is just a SOC2 with the audit details removed - it includes a high level statement from the company (Apple) and from the auditor (EY), that's it.
Also Apple certainly does invest heavily in security and privacy but SOC2's are so commoditized that it's like saying "look I can afford 50k", it's not particularly interesting
- pjmlp
Out of that whole report I got this gem,
macOS Security Compliance Project
- Havoc
I'm glad they're doing them.
Audits are decidedly imperfect, but on balance people tend to toe the line better on good practices when they know they're being audited.
- dzonga
can someone correct me - so apple is using servers that are running a closed down version of iOS on what I would assume is apple silicone, probably excess chips or older chips for the iCloud Private Cloud ?
- bstsb
the page keeps 301ing to the home page for me - could be a region issue