COZYROC SSIS+ Security & Data Handling Statement for Vendor Questionnaires and Risk Assessments

COZYROC SSIS+ Security & Data Handling Statement for Vendor Questionnaires and Risk Assessments

COZYROC SSIS+ is a third‑party component suite that runs entirely within your on‑premises Microsoft SQL Server Integration Services (SSIS) environment. COZYROC does not host your environment, does not provide managed services, and does not have access to your servers, databases, or data. 

Because the product is deployed and operated solely on infrastructure you control, most questions that assume a hosted service or vendor‑managed environment are not applicable to COZYROC. Your institution is fully responsible for securing the servers, databases, and networks where SSIS and COZYROC SSIS+ run (access control, patching, encryption, backups, monitoring, etc.).

For organizations requesting COZYROC to fill out Vendor Questionnaires and/or Security/Compliance Questionnaires, please refer to the following "Written Statement" to evaluate and fill out the forms needed for your own internal processes before considering sending them to sales@cozyroc.com for consideration.  Many of the forms and questionnaires sent are marked N/A for the questions per reasons stated below.

Written Statement:

COZYROC SSIS+ is an add‑on component suite for Microsoft SQL Server Integration Services (SSIS) that runs entirely within the customer’s own SSIS environment on infrastructure the customer owns and manages. The software executes in‑process with Microsoft SSIS and uses the same runtime, permissions, and connectivity that the customer has already configured for its ETL workloads.

COZYROC does not provide hosting, managed services (with exception of a separate COZYROC Cloud Managed and Hybrid SSIS-based Integration Solutions product offering), or remote administration of customer systems, and COZYROC has no independent logical or physical access to customer servers, databases, or networks. All access control, authentication, authorization, patching, encryption, backups, and monitoring are fully under the customer’s responsibility and are implemented using the customer’s own tools and policies.

The COZYROC SSIS+ components do not transmit customer data to COZYROC for processing or storage. All data handled by the components remains within the customer’s SSIS/SQL Server environment (or other endpoints the customer explicitly configures), and any support interactions are limited to information the customer chooses to share (for example, configuration details, logs with any sensitive data redacted by the customer).