Sand Solutions
Security and trust center evidence
Secure, U.S.-based cloud hosting for government
Summary
Sand Solutions has 4 vendor-stated rows in the CertReports index, last verified 21 Sep 2026. The strongest row is SOC 2: Vendor states SOC 2 Type 2 on its trust centre. This page is independent of the vendor’s own trust centre: dates, sources and caveats come from CertReports captures.
Reviewer brief
As of 21 Sep 2026, CertReports holds 4 vendor-stated rows for Sand Solutions, drawn from its trust centre (Drata). Sand Solutions states on its trust centre that it holds a SOC 2 Type II report, a FedRAMP authorization, a SOC 1 Type II report and a public SOC 3 report, captured 21 Sep 2026; these are vendor statements, not independent confirmations. No public evidence was found for ISO/IEC 27001, HIPAA, GDPR and PCI DSS as of 21 Sep 2026; that is a gap in the public record, not a finding of non-coverage, and the vendor can supply it under NDA.
- SOC 2: Vendor states SOC 2 Type 2 on its trust centre, vendor-stated as of 21 Sep 2026
- FedRAMP: Vendor states FedRAMP Moderate on its trust centre, vendor-stated as of 21 Sep 2026
Facts only, each dated; nothing here is inferred, scored or advised.
Among government and public sector vendors
0verified rows
Category median 1, across 57 indexed government and public sector vendors. Sand Solutions has no registry-verified row yet, like 16 percent of them; its evidence is vendor-stated or reported.
cloud hostingfedramp hostinggovernment clouditar hosting
Compare with similar vendors
Pick your own comparisonCompliance grid
SOC 2Vendor-statedVendor states SOC 2 Type 2 on its trust centre
as of 21 Sep 20262 sources- FedRAMPVendor-stated
Vendor states FedRAMP Moderate on its trust centre
as of 21 Sep 20262 sources
SOC 1Vendor-statedVendor states SOC 1 Type 2 on its trust centre
as of 21 Sep 20262 sources
SOC 3Vendor-statedVendor states SOC 3 on its trust centre
as of 21 Sep 20262 sources
Legal artefacts
No DPA, BAA or subprocessor list has been captured from a public page yet. Registry rows above do not depend on this. Check the vendor trust centre.
Subprocessors
No subprocessor list captured yet.
Security profile
- Pen test cadence
- annual
Displayed as a security profile from public statements, not as attestations, as of 21 Sep 2026.
Change history
- 18 Sep 2026First indexed by CertReports4 evidence rows across 4 frameworks entered the index.
Similar vendors with evidence
Related by product tags and the Government and public sector category, ranked by shared tags, description similarity and overlapping evidence. Never by popularity.
Project Hosts
Cloud and hosting
Project Hosts delivers secure, compliant cloud environments for SaaS providers, specializing in FedRAMP, DoD IL, and HITRUST standards to
Casepoint
Government and public sector
Discover Casepointâs secure, unified AI-powered platform for government, legal, and compliance work, including eDiscovery, legal hold
Darktrace Federal
Government and public sector
Darktrace Federal’s mission is to deliver complete AI-powered solutions to defend US federal government customers from cyber disruptions
Totara Learning
Government and public sector
TotaraGov is the FedRAMP® Certified government LMS trusted by federal, state, and local agencies to engage, develop, and retain
Evidence against regulations
All regulations for Sand SolutionsHow much of each regulation’s vendor requirements Sand Solutions’s public evidence reaches.
Reviewing a vendor on public evidence
All articlesWhat Is Third-Party Risk Management (TPRM)? A Practical Guide
Solomon Amos · 2 Nov 2026 · 10 min read
What Is a Trust Centre? Vendor Evidence vs Office Settings
Solomon Amos · 28 Oct 2026 · 10 min read