For anyone unaware, a SOC3 is just a SOC2 with the audit details removed - it includes a high level statement from the company (Apple) and from the auditor (EY), that's it.
Also Apple certainly does invest heavily in security and privacy but SOC2's are so commoditized that it's like saying "look I can afford 50k", it's not particularly interesting
by dzonga
0 subcomment
can someone correct me - so apple is using servers that are running a closed down version of iOS on what I would assume is apple silicone, probably excess chips or older chips for the iCloud Private Cloud ?
by Havoc
0 subcomment
I'm glad they're doing them.
Audits are decidedly imperfect, but on balance people tend to toe the line better on good practices when they know they're being audited.
by bstsb
2 subcomments
the page keeps 301ing to the home page for me - could be a region issue
Hacker News