COZYROC SSIS+ Security & Data Handling Statement for Vendor Questionnaires and Risk Assessments
COZYROC SSIS+ is a third‑party
component suite that runs entirely within your on‑premises
Microsoft SQL Server Integration Services (SSIS) environment. COZYROC does not
host your environment, does not provide managed services, and does not have
access to your servers, databases, or data.
Because the product is deployed and operated solely on
infrastructure you control, most questions that assume a hosted service
or vendor‑managed environment are not applicable to COZYROC.
Your institution is fully responsible for securing the servers, databases, and
networks where SSIS and COZYROC SSIS+ run (access control, patching,
encryption, backups, monitoring, etc.).
For organizations requesting COZYROC to fill out Vendor Questionnaires and/or Security/Compliance Questionnaires, please refer to the following "Written Statement" to evaluate and fill out the forms needed for your own internal processes before considering sending them to sales@cozyroc.com for consideration. Many of the forms and questionnaires sent are marked N/A for the questions per reasons stated below. Written Statement:
COZYROC SSIS+ is an add‑on component suite for Microsoft SQL Server Integration Services (SSIS) that runs entirely within the customer’s own SSIS environment on infrastructure the customer owns and manages. The software executes in‑process with Microsoft SSIS and uses the same runtime, permissions, and connectivity that the customer has already configured for its ETL workloads.
COZYROC does not provide hosting, managed services (with exception of a separate COZYROC Cloud Managed and Hybrid SSIS-based Integration Solutions product offering), or remote administration of customer systems, and COZYROC has no independent logical or physical access to customer servers, databases, or networks. All access control, authentication, authorization, patching, encryption, backups, and monitoring are fully under the customer’s responsibility and are implemented using the customer’s own tools and policies.
The COZYROC SSIS+ components do not transmit customer data to COZYROC for processing or storage. All data handled by the components remains within the customer’s SSIS/SQL Server environment (or other endpoints the customer explicitly configures), and any support interactions are limited to information the customer chooses to share (for example, configuration details, logs with any sensitive data redacted by the customer).