sigmashake-docs — Encryption at rest
What the documentation site stores, how it is encrypted, and where the keys live. Self-assessed mapping to SOC 2 CC6.7. SigmaShake has no SOC 2 report.
Summary
The docs site is a static site on Cloudflare Pages. It has no database, no
key-value store, no object bucket, and no secrets binding (see wrangler.toml).
It stores no customer data. The only content at rest is the public set of
documentation files that Docusaurus builds.
| Surface | What it holds | Encryption | Key custody |
|---|---|---|---|
| Cloudflare Pages static assets | Public documentation files | Provider-managed encryption at rest | Cloudflare |
| Source repository (GitHub) | Documentation source | Provider-managed encryption at rest | GitHub |
SigmaShake adds no application-layer encryption for this site, because the site holds no sensitive data.
Provider-managed encryption
Cloudflare publishes its own SOC 2 reports and key-management information in the Cloudflare Trust Hub. SigmaShake has no SOC 2 report (self-assessed). We do not control the data-at-rest keys for the underlying storage. Cloudflare does. We accept standard cloud-provider-managed-key risk.
Services that hold customer data
For SigmaShake services that store customer data, see the Data Processing Agreement (Section 6, technical and organizational measures) and the Privacy Policy.
Audit
The ISMS owner reviews this page by hand. No evidence collector checks this page.