Skip to main content
All CollectionsIntegrations
Prioritizing an Infrastructure to connect to Drata
Prioritizing an Infrastructure to connect to Drata

If you have multiple infrastructure providers, not all may be in scope for your SOC 2 audit

Ashley Hyman avatar
Written by Ashley Hyman
Updated over a week ago

Many customers have asked how to know which Infrastructure provider to connect to Drata (if you use multiple). We consulted with our auditor partners, and you will want to consider first, where your customer data is stored. Typically SOC 2 only looks at production systems and excludes non-prod environments.

The exception would be is if the Dev environment is where developers are writing and storing their code, if so you would need to look at that environment for your audit as well to ensure access to source code was locked down.

Did this answer your question?