Your Security Responsibilities
Security is a shared responsibility. While we implement robust security measures, you are responsible for:
- Using read-only credentials — We strongly recommend read-only API keys for all integrations
- Credential management — Regularly rotating and securely storing your credentials
- Access management — Properly managing who has access to your CloudAct account
- Reporting incidents — Promptly reporting any suspected security issues
Liability Disclaimer
CloudAct.ai assumes zero liability for any data breaches, security incidents, or unauthorized access arising from:
- Use of credentials with write or administrative permissions
- Third-party cloud providers or integration services
- Your failure to implement recommended security practices
- Cyberattacks or malicious activities beyond our control
Note: CloudAct.ai is compliance-ready (SOC 2 Type II readiness, GDPR/CCPA aligned, ISO 27001 aligned) but is not yet formally certified under these standards.
For maximum security, we strongly recommend deploying CloudAct.ai within your own cloud VPC via our Enterprise plan. This ensures all data processing occurs within your controlled environment. Contact our sales team at sales@cloudact.ai for Enterprise and VPC deployment options.
Report a Vulnerability
If you discover a security vulnerability, please report it responsibly. We take all security reports seriously and will respond promptly.