Code of Practice for Cloud Service Providers This Code of Practice for Cloud Service Providers (‘Code’) from the Cloud Industry Forum (‘CIF’) is for organizations offering to customers remotely hosted IT services of any type. These services include, but are not limited to, multi-tenanted services accessed via the Internet. For clarification, the Code is most suitable for organizations who fulfill the following requirements:- ■ Provide access to IT services (i.e. Cloud application(s) or Infrastructure as a Service) and ■ Have a direct contract for supply of these services with the purchaser (i.e. reseller, corporate or individual). Organizations claiming compliance with the Code shall conduct an annual Self-Certification and confirm the successful results of this Certification to the CIF in order to receive authorization to use the Certification Mark (the ‘logo’) for the following year. The Self-Certification claims will be listed on the CIF website (https:// selfcert.cloudindustryforum.org/certification) and hyperlinked from the logo displayed on the participant site. The CIF may spot check and randomly audit Self-Certifications and will investigate any formal complaint of non-compliance against an organization claiming compliance with the Code. In the event of finding a false declaration or material nonconformity, at the sole discretion of the CIF, the authorization to use the Certification Mark shall be immediately suspended, pending resolution, or terminated, and this action shall be documented on the CIF website, and may be reported publicly such as via press releases.