What is a cloud service provider (CSP)?
A cloud service provider (CSP) is a company that rents computing infrastructure, such as servers, storage, and databases, over the internet. The largest are Amazon Web Services (AWS), Microsoft Azure, and Google Cloud. A SaaS company's CSP is one of its most important subprocessors.
What the buyer is really asking
Name the provider or providers that host the product and the services you use from each. Buyers use this to check your provider's own certifications and to spot concentration risk.
Other ways buyers ask it
Every one of these wants the same answer:
- “Which cloud service providers do you use to host your services?”
- “Where is your application hosted?”
- “Do you use more than one cloud provider?”
Evidence to have ready
- Your subprocessor list
- The provider's SOC 2 or ISO 27001 report
How Tyrvar answers this
Tyrvar treats every wording above as one question. You write the answer once, attach the evidence, and revisit it when your setup changes. Each buyer gets that approved answer no matter how their questionnaire words it. If you have not answered it yet, Tyrvar flags the question for you and does not make something up. Try it on your own questionnaire.
Related cloud and infrastructure questions
- How do you document and apply the shared security responsibility model (SSRM) between your organization, your cloud providers, and your customers?
- How do you manage configuration and hardening of cloud infrastructure?
- How do you segregate production and non-production environments?
- Do you utilize a Web Application Firewall (WAF)?