Draivn
Draivn bridges the gap between insurers, brokers, and fleet operators with its ONE API data platform. Our goal is to empower the industry to leverage consistent and verified data for informed business decisions, enhancing profitability.
Alex Zhykh
CEO of Draivn
"We worked with Cloudzen to prepare our AWS-based infrastructure for SOC-2 compliance, leveraging Terraform for infrastructure as code. Thanks to their expertise, we achieved a SOC-2 ready environment, ensuring security best practices and compliance across our cloud services..."
About
the project
The Challenge
Draivn approached us with an urgent need for a production environment that met SOC-2 compliance requirements to pass a scheduled audit. The timeline was tight, and the infrastructure needed to be secure, reliable, and audit-ready. The complexity was further increased by the presence of multiple components within their cloud infrastructure, including Kubernetes clusters, CI/CD pipelines, and other integrated cloud services.
Our Solution
We leveraged Terraform along with our proprietary automation scripts to rapidly deploy the entire AWS infrastructure, ensuring compliance with SOC-2 requirements. Our approach included the following key components:
- IAM (Identity and Access Management): Enforcing least privilege access and role-based permissions.
- CloudTrail & CloudWatch: For continuous monitoring, logging, and audit trails.
- AWS Config & GuardDuty: For real-time compliance checks and threat detection.
- VPC (Virtual Private Cloud): Network segmentation and traffic flow control for enhanced security.
- KMS (Key Management Service): For data encryption at rest and in transit.
- Kubernetes Clusters: Securing and managing multi-region EKS clusters with role-based access control (RBAC) and pod-level security policies.
- CI/CD Pipelines: Implementing SOC-2 compliant CI/CD pipelines with GitHub Actions and CodePipeline, ensuring secure code deployment and continuous integration practices.
- Additional Cloud Components: Including S3 Buckets, RDS databases, and Load Balancers configured to comply with SOC-2 controls.
We conducted a comprehensive internal audit to identify and address any compliance gaps, then implemented the necessary controls and security measures to achieve full SOC-2 alignment. Our detailed documentation and proactive communication ensured that the entire process was transparent and efficient.
The result
Draivn successfully passed the SOC-2 audit, gaining a production-ready infrastructure that is scalable, secure, and fully SOC-2 compliant. The newly implemented environment not only met the audit requirements but also enhanced overall security posture, enabling Draivn to confidently handle production workloads while maintaining ongoing compliance.
Additionally, we ensured that complex components such as Kubernetes clusters and CI/CD pipelines were fully integrated and compliant, providing a robust, automated, and secure deployment process.
Our support in hiring and onboarding a permanent DevOps engineer ensured a smooth transition and long-term operational stability for their platform.
This achievement showcases the value of Cloudzen’s expertise in DevSecOps, cloud security, and compliance, making the entire compliance journey seamless and effective, even with a complex multi-component cloud environment.
Hear from our clients
Clients praise our work for innovative solutions and
significant improvements in their performance
significant improvements in their performance
"Initially, I was skeptical about cloud migration, but CloudZen made it painless. Their expertise is truly unmatched, and they delivered on time and without hassle. Thanks to them, we're running a cost-efficient AWS setup now with orders of magnitude lower operational overhead. We're still working with them on a retainer basis and couldn't be happier. Kudos for the level of service they provide!"
"After trying multiple DevOps consultants and services, we discovered Cloudzen while searching for a team that could truly deliver. Our infrastructure required a complete rebuild, and we needed a partner who could handle the complexity at scale..."
Your DevOps Under Control!
Sign up for a free consultation, and we will analyze your current stack, identify weak points, and suggest effective solutions.