Industry Leadership
Strategic Initiatives
CSA's strategic programs driving innovation in AI, cloud, and Zero Trust.
A public-interest 501(c)(3) dedicated to secure and trustworthy AI.




Industry Leadership
Strategic Initiatives
CSA's strategic programs driving innovation in AI, cloud, and Zero Trust.
A public-interest 501(c)(3) dedicated to secure and trustworthy AI.

CSAI FoundationChaptersEventsBlog
New Training Courses: Turn CSA research into practical skills with self-paced Frontier Ready Training.

STAR Registry Listing for

CoreCanopy

CoreCanopy

CoreCanopy is a software-as-a-service application for greenhouse gas accounting. Companies record energy, fuel and activity data, by hand or by CSV and XLSX import, and get Scope 1, Scope 2 and screening Scope 3 emissions calculated under the GHG Protocol from public emission factors. Every figure is traceable to its factor, publisher, dataset version and licence, so an auditor can recompute it.

Hosting and data: customer data and backups are stored in AWS eu-central-1 (Frankfurt). Data is encrypted in transit (TLS 1.2+) and at rest (AES-256), and isolated per customer by database row-level security.

Access: customer users sign in with breach-checked passwords and optional TOTP MFA; staff accounts require MFA, and staff can see a customer's data only through a read-only, time-limited support session the customer approves, recorded in the customer's own audit trail.

Portability: customers can export their data as CSV and XLSX at any time, without a support request.

The CCM-Lite is a simplified version of the Cloud Controls Matrix (CCM) v4.1. It includes 96 carefully chosen controls, a subset of the original 207. These controls are essential for any organization's cloud security, regardless of size or budget.
Information about CoreCanopy
Listed Since: 10/02/2026

STAR Level 1

Cloud Controls Matrix

CAIQ Lite Self-assessment v4.1.0

The CCM-Lite is a simplified version of the Cloud Controls Matrix (CCM) v4.1. It includes 96 carefully chosen controls, a subset of the original 207. These controls are essential for any organization's cloud security, regardless of size or budget.

Created or renewed 5 days ago, on October 02, 2026.