Standard
Cloud Exit and Data Portability Standard
This standard defines the requirements for planning, managing, and executing the exit from any cloud service provider or SaaS platform, and for ensuring portability of organizational data and workloads between platforms. It ensures that the organization is not locked into any single cloud provider without a documented exit path, and that all cloud contracts include minimum data portability and deletion rights.
- Type
- Standard
- Version
- 1.2.12
- Date
- 2026-10-26
- Owner
- Chief Information Security Officer
- Approving authority
- Chief Information Officer
- Classification
- Public
- Confidentiality
- Public
- Category
- Supply Chain
- Review frequency
- Annual
- Licence
- CC BY-SA 4.0
Read the full text on GitHub (opens in a new tab)
Outline
- 1. Purpose
- 2. Scope
- 3. Governance and accountability
- 4. Contract requirements
- 5. Cloud exit plan requirements
- 6. Data portability standards
- 7. Exit triggers
- 8. Exceptions
- 9. Framework alignment
Frameworks it maps to
- CSA CCM v4.1
- ISO/IEC 27001:2022
- NIST SP 800-53 Rev. 5
- GDPR (2018)
- EDPB Guidelines 07/2020 on the concepts of controller and processor in the GDPR, Version 2.1 (adopted 7 July 2021)
- EU Data Act (Regulation (EU) 2023/2854), Chapter VI: Switching between data processing services
Related documents
- Supplier and Cloud Governance Frameworksupply-chain
- Third-Party and Supply Chain Risk Standardrisk
- Asset Inventory Registeroperations
- Exception and Risk Acceptance Management Policygovernance
Next
All Documents