CloudFix Trust Center

Security, compliance, and privacy documentation for CloudFix and RightSpend.

SOC 2 Certified
SOC 2 Certified
Type 2
Data Access
Read-only IAM role, no write access to your infrastructure
Encryption
TLS 1.2+ in transit, AES-256 at rest
Uptime SLA
99.9% for CloudFix Dashboard
AWS Partner
AWS Partner
ISV Accelerate & Cloud Operations Competency
Automated Finders
75+ finders across 30+ AWS services

Platform Overview

CloudFix provides fully automated AWS cost optimization. Our platform identifies savings opportunities through 75+ purpose-built finders spanning more than 30 AWS services, then implements approved fixes via AWS SSM Automation — all with read-only access and customer-controlled execution.

  • $2B+ AWS spend analyzed
  • 75+ automated finders
  • 30+ AWS services covered
  • 500+ customers
  • 99.9% uptime SLA
  • SOC 2 Type 2

How CloudFix Works

CloudFix connects to your AWS account through a CloudFormation StackSet that creates carefully scoped IAM roles. Customer data is accessed through a read-oriented finder role — no write actions are ever performed without your explicit approval of change templates executed through AWS Systems Manager Change Manager and Automation runbooks.

Key principle: The fixer role is created by CloudFix but cannot be assumed or accessed by CloudFix. You retain full control over all changes to your infrastructure.

Trust Center Documents

Security

Encryption, IAM roles, network, incident response

 Compliance

SOC 2, GDPR, certifications, documentation requests

 Data Processing

DPA, sub-processors, data residency, ITSM data flows

 Architecture

IAM role diagrams, ITSM integration flow

 Support & SLA

Company overview, severity levels, escalation path, vulnerability disclosure

 Privacy

Privacy policy, data subject rights, GDPR basis

Need security documentation?

Request access to our SOC 2 reports, DPA, and other security documents.