# Cloud Service Provider Privacy Assessment Report

## Provider Information

| Field | Value |
|-------|-------|
| **Provider Name** | [Provider Legal Name] |
| **Service Name** | [Specific service being assessed] |
| **Service Model** | [IaaS / PaaS / SaaS] |
| **Headquarters** | [Country] |
| **Assessment Date** | [YYYY-MM-DD] |
| **Assessor** | [Name, Title] |

## Certifications Verified

| Certification | Status | Scope | Valid Through | Verified |
|--------------|--------|-------|---------------|----------|
| ISO 27001 | [Yes/No] | [Scope description] | [Date] | [Yes/No] |
| ISO 27018 | [Yes/No] | [Scope description] | [Date] | [Yes/No] |
| ISO 27017 | [Yes/No] | [Scope description] | [Date] | [Yes/No] |
| SOC 2 Type II | [Yes/No] | [Criteria covered] | [Period] | [Yes/No] |
| CSA STAR | [Level] | [Scope] | [Date] | [Yes/No] |

## Domain Assessments

### Domain 1: Data Residency (Weight: 20%)

| Question | Finding |
|----------|---------|
| Data at rest regions | [Regions] |
| Processing regions | [Regions] |
| Backup/DR regions | [Regions] |
| Metadata/telemetry regions | [Regions] |
| Support access countries | [Countries] |
| Region lock enabled | [Yes/No] |
| Third-country transfers | [Yes/No — mechanisms] |

**Score:** [1-5] | **Notes:** [Assessment notes]

### Domain 2: Multi-Tenancy (Weight: 20%)

| Question | Finding |
|----------|---------|
| Tenant isolation model | [Logical/Physical] |
| Per-tenant encryption keys | [Yes/No] |
| Cross-tenant testing | [Conducted/Not conducted] |

**Score:** [1-5] | **Notes:** [Assessment notes]

### Domain 3: ISO 27018 (Weight: 15%)

**Score:** [1-5] | **Notes:** [Assessment notes]

### Domain 4: CSA STAR (Weight: 15%)

**Score:** [1-5] | **Notes:** [Assessment notes]

### Domain 5: SOC 2 Privacy (Weight: 15%)

**Score:** [1-5] | **Notes:** [Assessment notes]

### Domain 6: Shared Responsibility (Weight: 15%)

| Control Domain | Controller | Provider | Gap? |
|---------------|-----------|---------|------|
| [Domain] | [Responsibility] | [Responsibility] | [Yes/No] |

**Score:** [1-5] | **Notes:** [Assessment notes]

## Scoring Summary

| Domain | Weight | Score | Weighted |
|--------|--------|-------|----------|
| Data residency | 20% | [X] | [X.XX] |
| Multi-tenancy | 20% | [X] | [X.XX] |
| ISO 27018 | 15% | [X] | [X.XX] |
| CSA STAR | 15% | [X] | [X.XX] |
| SOC 2 Privacy | 15% | [X] | [X.XX] |
| Shared responsibility | 15% | [X] | [X.XX] |
| **TOTAL** | **100%** | | **[X.XX]** |

## Decision

| Field | Value |
|-------|-------|
| **Decision** | [Approved / Conditional / Rejected] |
| **Conditions** | [List of conditions] |
| **Supplementary Measures** | [Controller-side measures required] |

**Assessor:** [Name, Date]
**Approved By:** [Name, Date]