On Tue, Jun 13, 2023 at 07:54:21AM -0700, Christophe Pettus <xof@thebuild.com> wrote:
> Hi,
>
> > On Jun 12, 2023, at 11:57, Raj Kiran <raj.kiran@prokopto.io> wrote:
> > Prokopto is completing our annual vendor review process. Please share your most recent SOC II Type 2 report.
>
> The PostgreSQL project isn't SOC2 certified, and will almost certainly
> never be. If you require SOC2 compliance, you'll need to work with a
> commercial (that is to say, not free) vendor who is SOC2 certified in
> order to bring PostgreSQL under their certification.
And I doubt that Postgres could be described as a
vendor. By definition, a vendor is a person or
organisation that sells something.
OED: vendor(n): One who disposes of a thing by sale; a seller
cheers,
raf