--- title: How to Achieve SOC2 Compliance for Teleport Cloud with... description: Teleport announces its Cloud offering is now SOC2 Type II compliant, following last year's on-prem certification. The post walks through how Teleport uses its... canonical: https://daily.dev/posts/how-to-achieve-soc2-compliance-for-teleport-cloud-with-teleport-on-pre-pfgx79ce1 twitter:card: summary_large_image twitter:site: @dailydotdev og:type: website og:site_name: daily.dev og:title: How to Achieve SOC2 Compliance for Teleport Cloud with Teleport On-Pre | daily.dev og:description: Teleport announces its Cloud offering is now SOC2 Type II compliant, following last year's on-prem certification. The post walks through how Teleport uses its... og:url: https://daily.dev/posts/how-to-achieve-soc2-compliance-for-teleport-cloud-with-teleport-on-pre-pfgx79ce1 og:image: https://api.daily.dev/og/posts/PFGx79CE1.png og:image:alt: How to Achieve SOC2 Compliance for Teleport Cloud with Teleport On-Pre og:image:width: 1200 og:image:height: 630 og:locale: en --- > ## Documentation Index > Fetch the complete documentation index at: https://daily.dev/llms.txt > Use this file to discover all available pages before exploring further. # How to Achieve SOC2 Compliance for Teleport Cloud with Teleport On-Pre **[Teleport](https://daily.dev/sources/teleport)** · 7 min read · 0 upvotes · 0 comments ## Summary Teleport announces its Cloud offering is now SOC2 Type II compliant, following last year's on-prem certification. The post walks through how Teleport uses its own product internally to achieve compliance: eliminating SSH keys in favor of short-lived certificates, integrating with Okta for zero-touch onboarding/offboarding via their HRIS (Rippling), using Terraform for auditable role and access changes, forwarding audit logs to Panther SIEM, and using Slack-based approval workflows for just-in-time access requests. It maps these practices to four SOC2 control areas (CC6, CC7, CC8) and mentions new FluentD support for log forwarding. ## Full article daily.dev links to this article rather than hosting it. Read it at the original source: ## Questions this post answers ### What SOC2 control areas does Teleport help satisfy? Teleport helps satisfy four of the nine SOC2 control areas: CC6 Control Activities (role-based access controls using short-lived certificates), CC6 Physical and Logical Access controls (temporary security credentials per user role), CC7 System Operations (audit logging and session recording), and CC8 Change Management (just-in-time permission elevation with Slack-based approvals). _See how daily.dev surfaces practical SOC2 and access-control implementation write-ups for engineering teams._ ### How can I eliminate SSH keys while staying SOC2 compliant? Replace long-lived SSH keys with short-lived certificates issued through an identity-aware access proxy tied to single sign-on. This removes the need to manually revoke keys on termination, since certificates expire automatically and access is federated through the identity provider, satisfying SOC2 requirements around limiting production access and timely revocation. _Developers weighing certificate-based SSH access can track real implementation stories on daily.dev._ ## Similar posts on daily.dev - [Elastic Cloud Serverless achieves major compliance certifications across AWS, Azure, and GCP](https://daily.dev/posts/elastic-cloud-serverless-achieves-major-compliance-certifications-across-aws-azure-and-gcp-ome5bdzbv) · elastic · 1 upvotes · 0 comments - [The Complete SOC 2 Type II Implementation Handbook for Engineers: A Month-by-Month Roadmap with Real Commands](https://daily.dev/posts/the-complete-soc-2-type-ii-implementation-handbook-for-engineers-a-month-by-month-roadmap-with-real-ypdnqoc3n) · freeCodeCamp · 1 upvotes · 0 comments - [With the Rise of AI Agents, SOC 2 Should Adapt or Risk Irrelevance](https://daily.dev/posts/with-the-rise-of-ai-agents-soc-2-should-adapt-or-risk-irrelevance-gpv5fkfwq) · BleepingComputer · 1 upvotes · 0 comments --- Tags: [#authentication](https://daily.dev/tags/authentication), [#logging](https://daily.dev/tags/logging) [View this post on daily.dev](https://daily.dev/posts/how-to-achieve-soc2-compliance-for-teleport-cloud-with-teleport-on-pre-pfgx79ce1) ```json {"@context":"https://schema.org","@graph":[{"@type":"Organization","@id":"https://daily.dev/#organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180},"sameAs":["https://twitter.com/dailydotdev","https://github.com/dailydotdev","https://www.linkedin.com/company/daily-dev-ltd"]},{"@type":"WebSite","@id":"https://daily.dev/#website","url":"https://daily.dev","name":"daily.dev","publisher":{"@id":"https://daily.dev/#organization"},"potentialAction":{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https://daily.dev/search?q={search_term_string}"},"query-input":"required name=search_term_string"}}]} {"@context":"https://schema.org","@type":"TechArticle","headline":"How to Achieve SOC2 Compliance for Teleport Cloud with Teleport On-Pre","url":"https://daily.dev/posts/how-to-achieve-soc2-compliance-for-teleport-cloud-with-teleport-on-pre-pfgx79ce1","mainEntityOfPage":{"@type":"WebPage","@id":"https://daily.dev/posts/how-to-achieve-soc2-compliance-for-teleport-cloud-with-teleport-on-pre-pfgx79ce1"},"datePublished":"2026-08-23T12:19:11.551Z","dateModified":"2026-10-14T02:26:36.231Z","description":"Teleport announces its Cloud offering is now SOC2 Type II compliant, following last year's on-prem certification. The post walks through how Teleport uses its...","image":"https://media.daily.dev/image/upload/s--58gMhC4P--/f_auto/v1722860399/public/Placeholder%2012","thumbnailUrl":"https://media.daily.dev/image/upload/s--58gMhC4P--/f_auto/v1722860399/public/Placeholder%2012","isAccessibleForFree":true,"articleSection":"Teleport","inLanguage":"en","publisher":{"@type":"Organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180}},"author":{"@type":"Organization","name":"Teleport","logo":"https://media.daily.dev/image/upload/s--Dw-Bbw6O--/c_limit,w_256/f_auto,q_auto/v1787487494/logos/teleport?_a=BAMAMicg0","url":"https://daily.dev/sources/teleport"},"commentCount":0,"discussionUrl":"https://daily.dev/posts/how-to-achieve-soc2-compliance-for-teleport-cloud-with-teleport-on-pre-pfgx79ce1","interactionStatistic":[{"@type":"InteractionCounter","interactionType":{"@type":"LikeAction"},"userInteractionCount":0},{"@type":"InteractionCounter","interactionType":{"@type":"CommentAction"},"userInteractionCount":0}],"keywords":"authentication,logging","timeRequired":"PT7M"} {"@context":"https://schema.org","@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https://daily.dev"},{"@type":"ListItem","position":2,"name":"Teleport","item":"https://daily.dev/sources/teleport"},{"@type":"ListItem","position":3,"name":"How to Achieve SOC2 Compliance for Teleport Cloud with Teleport On-Pre"}]} {"@context":"https://schema.org","@type":"FAQPage","@id":"https://daily.dev/posts/how-to-achieve-soc2-compliance-for-teleport-cloud-with-teleport-on-pre-pfgx79ce1#faq","mainEntity":[{"@type":"Question","name":"What SOC2 control areas does Teleport help satisfy?","acceptedAnswer":{"@type":"Answer","text":"Teleport helps satisfy four of the nine SOC2 control areas: CC6 Control Activities (role-based access controls using short-lived certificates), CC6 Physical and Logical Access controls (temporary security credentials per user role), CC7 System Operations (audit logging and session recording), and CC8 Change Management (just-in-time permission elevation with Slack-based approvals). See how daily.dev surfaces practical SOC2 and access-control implementation write-ups for engineering teams."}},{"@type":"Question","name":"How can I eliminate SSH keys while staying SOC2 compliant?","acceptedAnswer":{"@type":"Answer","text":"Replace long-lived SSH keys with short-lived certificates issued through an identity-aware access proxy tied to single sign-on. This removes the need to manually revoke keys on termination, since certificates expire automatically and access is federated through the identity provider, satisfying SOC2 requirements around limiting production access and timely revocation. Developers weighing certificate-based SSH access can track real implementation stories on daily.dev."}}]} ```