security-measures

This policy only applies to vendors or contractors handling Oso or its customers’ data.

Oso will document vendor information, to help in case of a potential incident. This information includes:

Vendor name, i.e. Which vendor?
Vendor contact information, i.e. How do we contact the vendor? List different contacts for billing, support, and/or security where they apply.
Type of data shared, i.e. What types of data from Oso does the vendor collect or otherwise have access to?
Security report or questionnaire shared by the vendor

The following vendors are used to deliver the Oso Cloud service.

Vendor Name	Address	Description
AWS	Amazon Web Services, Inc., 410 Terry Avenue North, Seattle, WA 98109-5210	Primary Cloud platform for all Oso Cloud infrastructure, including control and feature services, S3/Cloudfront distribution of Oso Cloud CLI and other resources, internal services (e.g., analytics, billing infrastructure)
Google	1600 Amphitheatre ParkwayMountain View, California 94043	Primary identity provider for Single Sign On to other critical vendors.
GitHub	88 Colin P. Kelly Jr. St. San Francisco, CA 94107	Primary source code hosting and collaboration platform.
Pulumi Cloud	1525 4th Avenue, Suite 800, Seattle, WA 98101	The infrastructure-as-code provider used to orchestrate and deploy our AWS infrastructure. Store the state of deployed environments and coordinate changes between users.