Обсуждение: SOC II Type 2 report.

Hi,

> On Jun 12, 2023, at 11:57, Raj Kiran <raj.kiran@prokopto.io> wrote:
> Prokopto is completing our annual vendor review process. Please share your most recent SOC II Type 2 report.

The PostgreSQL project isn't SOC2 certified, and will almost certainly never be.  If you require SOC2 compliance,
you'llneed to work with a commercial (that is to say, not free) vendor who is SOC2 certified in order to bring
PostgreSQLunder their certification. 

On Tue, Jun 13, 2023 at 07:54:21AM -0700, Christophe Pettus <xof@thebuild.com> wrote:

> Hi,
> 
> > On Jun 12, 2023, at 11:57, Raj Kiran <raj.kiran@prokopto.io> wrote:
> > Prokopto is completing our annual vendor review process. Please share your most recent SOC II Type 2 report.
> 
> The PostgreSQL project isn't SOC2 certified, and will almost certainly
> never be.  If you require SOC2 compliance, you'll need to work with a
> commercial (that is to say, not free) vendor who is SOC2 certified in
> order to bring PostgreSQL under their certification.

And I doubt that Postgres could be described as a
vendor. By definition, a vendor is a person or
organisation that sells something.

  OED: vendor(n): One who disposes of a thing by sale; a seller

cheers,
raf