Integration · Cloud & infrastructure

DigitalOcean integration for continuous SOC 2 & ISO 27001 compliance

CATAAM connects to DigitalOcean with read-only access and runs 1 automated check against your real configuration. The results map to 1 control across 3 frameworks, including SOC 2, ISO 27001, SOC 1.

automated checks: 1
controls mapped: 1
frameworks: 3

What happens when you connect DigitalOcean

Connect with read-only access
Add a read-only role, OAuth scope or API token for DigitalOcean. The credential is encrypted at rest.
Discover assets
CATAAM pulls the accounts, users, repositories or devices it finds into one asset inventory.
Run 1 automated check
Every check runs against your real configuration, then keeps running on a schedule.
Map results to 1 control
Each result lands on the controls it proves — and counts for every framework that shares them.
Store evidence and raise issues
Passing checks become audit evidence. Failures show up for the control owner and can open a Jira issue.

The 1 check CATAAM runs on DigitalOcean

Each check runs against your real DigitalOcean configuration and keeps running on a schedule. Check names are shown as they appear in the CATAAM platform.

DigitalOcean databases are on a private network (VPC)

Controls these checks support (1)

A passing check becomes evidence for each control below, and counts for every framework that shares the control.

Control	Requirement	Frameworks
IAC-1	Production application access restricted	SOC 2, ISO 27001, SOC 1

DigitalOcean integration: frequently asked questions

What does CATAAM check in DigitalOcean?

CATAAM runs 1 automated check on DigitalOcean: DigitalOcean databases are on a private network (VPC).

Which compliance frameworks does the DigitalOcean integration support?

The DigitalOcean checks map to 1 control and count toward SOC 2, ISO 27001, SOC 1.

Does CATAAM need write access to DigitalOcean?

No. Connectors use read-only roles, scopes or API tokens, and credentials are encrypted at rest. The only optional write anywhere in CATAAM is opening Jira issues for failed checks.

How do I connect DigitalOcean to CATAAM?

Add a read-only role, OAuth scope or API token for DigitalOcean in CATAAM. CATAAM then discovers your assets, runs the checks and keeps running them on a schedule, storing each result as audit evidence.