On Tue, Jun 13, 2023 at 07:54:21AM -0700, Christophe Pettus <xof@xxxxxxxxxxxx> wrote: > Hi, > > > On Jun 12, 2023, at 11:57, Raj Kiran <raj.kiran@xxxxxxxxxxx> wrote: > > Prokopto is completing our annual vendor review process. Please share your most recent SOC II Type 2 report. > > The PostgreSQL project isn't SOC2 certified, and will almost certainly > never be. If you require SOC2 compliance, you'll need to work with a > commercial (that is to say, not free) vendor who is SOC2 certified in > order to bring PostgreSQL under their certification. And I doubt that Postgres could be described as a vendor. By definition, a vendor is a person or organisation that sells something. OED: vendor(n): One who disposes of a thing by sale; a seller cheers, raf
