InterCloud

Awards & Certifications

Security and quality standards
InterCloud builds to

We build to recognized security and engineering frameworks, comply with data-protection law, including the PDPA, and measure ourselves by customer outcomes. This page describes what that means in practice.

Trust Center

Certifications

Standards we build to

Our practices are aligned with recognized frameworks. We describe them as alignment until a formal audit confirms certification.

  • OWASP ASVS-informed secure development

    Our secure development practices, including code review, dependency updates, authentication and session handling, are informed by the OWASP Application Security Verification Standard.

  • ISO/IEC 27001-aligned controls

    Access control, logging, change management and incident response are aligned with ISO/IEC 27001 control objectives.

  • Personal data handling

    We collect and process personal data for defined purposes, keep customer data logically separated, and return or delete it at the end of a contract, in line with personal-data protection law such as the PDPA.

  • AWS Well-Architected practices

    Our infrastructure follows the AWS Well-Architected framework for security, reliability and performance, with Terraform-managed environments and Cloudflare at the edge.

Awards

Recognition

We measure ourselves by customer outcomes and by the length of our customer relationships. Since 2013 we have worked with organizations such as THAI, SCG, Bangkok Bank, Lotus's, CENTRAL and National Telecom, as well as ministries, agencies and institutes in the public sector. These relationships are the form of recognition we value most.

Formal awards and industry recognitions will be listed on this page as they are announced.

Compliance

How we protect customer data

The controls that apply to our products and to the way we operate them.

  • Data protection

    We comply with the Personal Data Protection Act (PDPA) and, where applicable, the EU GDPR. Our Privacy Policy explains what we collect, the purposes, and the rights of data subjects.

  • Data residency

    Our services run on AWS in the Asia Pacific (Bangkok) region, so customer data can remain in Thailand.

  • Audit logs

    GlowScale, Orbio, SnowTrack and TrustFlow record which user performed each action and when, so customer administrators can review activity.

  • Access reviews

    Role-based access (Owner, Admin, Member, Viewer), least-privilege access for our staff, SSO, passkeys and two-factor authentication.

  • Backups and recovery

    Regular backups and documented recovery procedures, with service levels defined in the customer agreement.

  • Monitoring

    Production systems are monitored and logged to detect and respond to incidents, using the same observability we provide as SnowTrack.

Learn more

Information for vendor assessments

We complete security questionnaires and share information about our controls to support a customer's own review.

Contact UsTrust Center