Opens in a new tab
vmblog logo 2024 wht (updated)

Cloud Security Alliance Names Google Cloud as First Company to be Valid-AI-ted, Setting New Benchmark for Data-driven Cloud Assurance

Share: 

David Marshall | Published: August 14, 2025

The Cloud Security Alliance (CSA) announced that Google Cloud has become the first organization to earn CSA’s Valid-AI-ted designation, based on CSA’s new AI-powered validation tool for evaluating Security, Trust, Assurance, and Risk (STAR)Level 1 assessments.

“Google Cloud, through security-conscious innovation, rigorous safety practices, and transparent governance, consistently demonstrates its commitment and unwavering support of a safe and secure cloud computing environment. By embedding security into every layer of its cloud infrastructure, Google Cloud helps organizations build and scale with confidence. Google Cloud continues to set new standards for secure, ethical, and accountable cloud security, and it’s fitting that they would become the first organization to receive the Valid-AI-ted badge,” said Jim Reavis, CEO and co-founder, Cloud Security Alliance. 

“At Google Cloud, we are passionate about leading AI-powered innovation and transformation within the cloud. CSA’s Valid-AI-ted badge builds on our efforts to accelerate secure cloud adoption and further foster a robust digital future for organizations around the globe,” said Chris DeRusha, Director of Global Public Sector Compliance, Google Cloud.

Operating under a “shared fate” model, Google Cloud actively contributes to customer security posture and outcomes. The platform is engineered to safely build, deploy, and run AI workloads, ensuring compliance and managing risk across the AI lifecycle. This includes robust protection for AI data, models, applications, and infrastructure, helping secure generative AI systems and accelerate adoption. Google openly shares best practices, such as its Secure AI Framework (SAIF) and the Recommended AI Controls Framework, leveraging its extensive security expertise to allow organizations to focus on core business objectives.

As part of CSA’s broader Compliance Automation Revolution, Valid-AI-ted is unique in its automation of cloud security assessment. It provides precise, objective, and rapid validation of STAR Level 1 submissions, using state-of-the-art LLM technology-something no other cloud assurance framework offers at scale today. 

Valid-AI-ted generates a detailed report with graded scores per question and domain, shared privately with the submitter. CSA members can submit an unlimited number of times, while non-member providers can remediate and resubmit up to 10 times. Upon passing, they earn a distinctive STAR Level 1 Valid-AI-ted badge that can be displayed on both the CSA STAR Registry and their own platforms.