Draivn
Draivn bridges the gap between insurers, brokers, and fleet operators with its ONE API data platform. Our goal is to empower the industry to leverage consistent and verified data for informed business decisions, enhancing profitability.
Alex Zhykh
CEO of Draivn
"We worked with Cloudzen to prepare our AWS-based infrastructure for SOC-2 compliance, leveraging Terraform for infrastructure as code. Thanks to their expertise, we achieved a SOC-2 ready environment, ensuring security best practices and compliance across our cloud services...
Read full review→
About
the project
The Challenge
Draivn approached us with an urgent need for a production environment that met SOC-2 compliance requirements to pass a scheduled audit. The timeline was tight, and the infrastructure needed to be secure, reliable, and audit-ready. The complexity was further increased by the presence of multiple components within their cloud infrastructure, including Kubernetes clusters, CI/CD pipelines, and other integrated cloud services.
Our Solution
We leveraged Terraform along with our proprietary automation scripts to rapidly deploy the entire AWS infrastructure, ensuring compliance with SOC-2 requirements. Our approach included the following key components:
- IAM (Identity and Access Management): Enforcing least privilege access and role-based permissions.
- CloudTrail & CloudWatch: For continuous monitoring, logging, and audit trails.
- AWS Config & GuardDuty: For real-time compliance checks and threat detection.
- VPC (Virtual Private Cloud): Network segmentation and traffic flow control for enhanced security.
- KMS (Key Management Service): For data encryption at rest and in transit.
- Kubernetes Clusters: Securing and managing multi-region EKS clusters with role-based access control (RBAC) and pod-level security policies.
- CI/CD Pipelines: Implementing SOC-2 compliant CI/CD pipelines with GitHub Actions and CodePipeline, ensuring secure code deployment and continuous integration practices.
- Additional Cloud Components: Including S3 Buckets, RDS databases, and Load Balancers configured to comply with SOC-2 controls.
We conducted a comprehensive internal audit to identify and address any compliance gaps, then implemented the necessary controls and security measures to achieve full SOC-2 alignment. Our detailed documentation and proactive communication ensured that the entire process was transparent and efficient.
The result
Draivn successfully passed the SOC-2 audit, gaining a production-ready infrastructure that is scalable, secure, and fully SOC-2 compliant. The newly implemented environment not only met the audit requirements but also enhanced overall security posture, enabling Draivn to confidently handle production workloads while maintaining ongoing compliance.
Additionally, we ensured that complex components such as Kubernetes clusters and CI/CD pipelines were fully integrated and compliant, providing a robust, automated, and secure deployment process.
Our support in hiring and onboarding a permanent DevOps engineer ensured a smooth transition and long-term operational stability for their platform.
This achievement showcases the value of Cloudzen’s expertise in DevSecOps, cloud security, and compliance, making the entire compliance journey seamless and effective, even with a complex multi-component cloud environment.
Hear from our clients
Clients praise our work for innovative solutions and
significant improvements in their performance
significant improvements in their performance
"At GPX, we worked with Cloudzen to migrate all our software to a Kubernetes cluster. They built the necessary CI/CD routines, configured autoscaling rules for our application, provided the required training, and transferred essential knowledge to our GPX team.
The Cloudzen team worked diligently to ensure a smooth and efficient transition. Everything worked as expected, and we are satisfied with the results..."
"The Cloudzen team quickly set up a Kubernetes cluster on GCP, enabling both vertical and horizontal scaling based on our application’s metrics. We are more than satisfied with the results..."
We are more than satisfied with the results: we now have a system that automatically responds to traffic surges, scales up and down as needed, and operates seamlessly..."
Your DevOps Under Control!
Sign up for a free consultation, and we will analyze your current stack, identify weak points, and suggest effective solutions.