CSA Official Press Release
Published 08/04/2025
Cloud Security Alliance Names Google Cloud as First Company to be Valid-AI-ted, Setting New Benchmark for Data-driven Cloud Assurance
Milestone recognizes Google Cloud’s leadership in transparent and trusted cloud computing services
SEATTLE – August 4, 2025 – The Cloud Security Alliance (CSA), the world’s leading organization dedicated to defining standards, certifications, and best practices to help ensure a secure cloud computing environment, proudly announced today that Google Cloud has become the first organization to earn CSA’s Valid-AI-ted designation, based on CSA’s new AI-powered validation tool for evaluating Security, Trust, Assurance, and Risk (STAR)Level 1 assessments.
“Google Cloud, through security-conscious innovation, rigorous safety practices, and transparent governance, consistently demonstrates its commitment and unwavering support of a safe and secure cloud computing environment. By embedding security into every layer of its cloud infrastructure, Google Cloud helps organizations build and scale with confidence. Google Cloud continues to set new standards for secure, ethical, and accountable cloud security, and it’s fitting that they would become the first organization to receive the Valid-AI-ted badge,” said Jim Reavis, CEO and co-founder, Cloud Security Alliance.
“At Google Cloud, we are passionate about leading AI-powered innovation and transformation within the cloud. CSA's Valid-AI-ted badge builds on our efforts to accelerate secure cloud adoption and further foster a robust digital future for organizations around the globe,” said Chris DeRusha, Director of Global Public Sector Compliance, Google Cloud.
Operating under a "shared fate" model, Google Cloud actively contributes to customer security posture and outcomes. The platform is engineered to safely build, deploy, and run AI workloads, ensuring compliance and managing risk across the AI lifecycle. This includes robust protection for AI data, models, applications, and infrastructure, helping secure generative AI systems and accelerate adoption. Google openly shares best practices, such as its Secure AI Framework (SAIF) and the Recommended AI Controls Framework, leveraging its extensive security expertise to allow organizations to focus on core business objectives.
As part of CSA’s broader Compliance Automation Revolution, Valid-AI-ted is unique in its automation of cloud security assessment. It provides precise, objective, and rapid validation of STAR Level 1 submissions, using state-of-the-art LLM technology—something no other cloud assurance framework offers at scale today.
Valid-AI-ted generates a detailed report with graded scores per question and domain, shared privately with the submitter. CSA members can submit an unlimited number of times, while non-member providers can remediate and resubmit up to 10 times. Upon passing, they earn a distinctive STAR Level 1 Valid-AI-ted badge that can be displayed on both the CSA STAR Registry and their own platforms.
Learn more about earning a Valid-AI-ted badge.
About Cloud Security Alliance
The Cloud Security Alliance (CSA) is the world’s leading organization dedicated to defining and raising awareness of best practices to help ensure a secure cloud computing environment. CSA harnesses the subject matter expertise of industry practitioners, associations, governments, and its corporate and individual members to offer cloud security-specific research, education, training, certification, events, and products. CSA's activities, knowledge, and extensive network benefit the entire community impacted by cloud — from providers and customers to governments, entrepreneurs, and the assurance industry — and provide a forum through which different parties can work together to create and maintain a trusted cloud ecosystem. For further information, visit us at www.cloudsecurityalliance.org, and follow us on X @cloudsa.
Media Contact
Kristina Rundquist
ZAG Communications for the CSA
kristina@zagcommunications.com
About Cloud Security Alliance
The Cloud Security Alliance is a not-for-profit organization with a mission to promote the use of best practices for providing security assurance within Cloud Computing, and to provide education on the uses of Cloud Computing to help secure all other forms of computing. The Cloud Security Alliance is led by a broad coalition of industry practitioners, corporations, associations and other key stakeholders. For further information, follow us on Twitter @cloudsa.
For press inquiries, email Zenobia Godschalk of ZAG Communications or reach her by phone at 650.269.8315.