Cloudly Compliance

1. Governance and Accountability

• Defined internal ownership for security and compliance operations.
• Policies and standards are reviewed and updated against risk changes.
• Staff are trained on confidentiality and secure data handling expectations.

2. Auditability and Evidence

• Administrative and workflow events are captured in audit logs.
• Operational events are retained to support investigation and assurance reviews.
• Control evidence can be prepared for customer due diligence workflows.

3. Data Handling Controls

• Customer data processing is governed by documented handling procedures.
• Access is constrained by role and operational necessity.
• Retention and deletion workflows are aligned to contractual and legal needs.

4. Privacy and Legal Alignment

Cloudly services are operated with alignment to Australian privacy principles and contractual privacy obligations. Customers remain responsible for implementing their own policy, consent, and regulatory requirements for their specific industry use case.