Industry Leadership
Strategic Initiatives
CSA's strategic programs driving innovation in AI, cloud, and Zero Trust.
A public-interest 501(c)(3) dedicated to secure and trustworthy AI.




Industry Leadership
Strategic Initiatives
CSA's strategic programs driving innovation in AI, cloud, and Zero Trust.
A public-interest 501(c)(3) dedicated to secure and trustworthy AI.

CSAI FoundationChaptersEventsBlog
Take this survey on AI-driven code security, vulnerability management, and autonomous remediation to help shape industry research →

STAR Registry Listing for

FacturaSV & ComercioSV Cloud Platform

FacturaSV & ComercioSV Cloud Platform

FacturaSV & ComercioSV Cloud Platform is a multi-tenant SaaS suite hosted on Google Cloud and Firebase (us-central1) across Web, Android, iOS, macOS, and Windows:

  • FacturaSV B2B SaaS (https://facturasv.com): Electronic Tax Invoicing (DTE) integrated with El Salvador's Ministry of Finance, POS, inventory, and statutory VAT reports.
  • ComercioSV Marketplace (https://comerciosv.com): B2C storefronts, order fulfillment, OTP-verified delivery, and hosted payment checkout.
Cloud & AI Security Architecture
  • Multi-Tenant Isolation: Strict tenant-scoped rules in Cloud Firestore, Firebase Auth, and Firebase App Check anti-abuse attestation.
  • Encryption & Payments: TLS 1.2+/1.3 in transit, AES-256 at rest, Secret Manager custody for DTE signing keys, and zero cardholder data storage via Wompi HTTPS redirection.
  • Trustworthy AI: Optional Gemini-assisted executive insights apply PII and sensitive-category masking before inference, require human review, and never train models on customer data.
Offers an industry-accepted way to document what security controls exist in solutions that include AI components or are AI products. It provides a set of Yes/No questions a cloud consumer and cloud auditor may wish to ask of a cloud provider to ascertain their compliance to the Artificial Intelligence Controls Matrix (AICM).
Offers an industry-accepted way to document what security controls exist in IaaS, PaaS, and SaaS services. It provides a set of Yes/No/NA questions and space to justify the response a cloud consumer and cloud auditor may wish to ask of a cloud provider to ascertain their compliance to the Cloud Controls Matrix (CCM).
Information about FacturaSV & ComercioSV Cloud Platform
Listed Since: 11/04/2026

STAR Level 1

Cloud Controls Matrix

CAIQ Self-assessment v4.1.0

Offers an industry-accepted way to document what security controls exist in IaaS, PaaS, and SaaS services. It provides a set of Yes/No/NA questions and space to justify the response a cloud consumer and cloud auditor may wish to ask of a cloud provider to ascertain their compliance to the Cloud Controls Matrix (CCM).

Created or renewed 1 day ago, on November 04, 2026.

STAR for AI Level 1

AI Controls Matrix

AI CAIQ Self-assessment v1.1.0

Offers an industry-accepted way to document what security controls exist in solutions that include AI components or are AI products. It provides a set of Yes/No questions a cloud consumer and cloud auditor may wish to ask of a cloud provider to ascertain their compliance to the Artificial Intelligence Controls Matrix (AICM).

Created or renewed about 15 hours ago, on November 04, 2026.