Industry Leadership
Strategic Initiatives
CSA's strategic programs driving innovation in AI, cloud, and Zero Trust.
A public-interest 501(c)(3) dedicated to secure and trustworthy AI.




Industry Leadership
Strategic Initiatives
CSA's strategic programs driving innovation in AI, cloud, and Zero Trust.
A public-interest 501(c)(3) dedicated to secure and trustworthy AI.

CSAI FoundationChaptersEventsBlog
New Training Courses: Turn CSA research into practical skills with self-paced Frontier Ready Training.

STAR Registry Listing for

PortaPro

PortaPro

PortaPro is a multi-tenant software-as-a-service platform for portable sanitation, septic, roll-off and event rental operators, delivered as a web application (app.portaprosoftware.com) and iOS and Android mobile apps.

In scope for this assessment

  • Office application: customers and service sites, quoting, scheduling, dispatch and route planning, invoicing, payments, reporting, team management and the customer portal
  • Driver and technician mobile app: routes, service completion, photos, signatures, inspections and time clock
  • Supporting infrastructure: Supabase (PostgreSQL and file storage on AWS us-east-1), Vercel (application hosting), Clerk (identity), Stripe (payments), Resend and Twilio (email, text and voice)

Customer data is stored in the United States. Integrations a customer chooses to connect (QuickBooks, Xero, Gusto and telematics providers) receive data only on that customer's instruction.

Offers an industry-accepted way to document what security controls exist in IaaS, PaaS, and SaaS services. It provides a set of Yes/No/NA questions and space to justify the response a cloud consumer and cloud auditor may wish to ask of a cloud provider to ascertain their compliance to the Cloud Controls Matrix (CCM).
Information about PortaPro
Listed Since: 10/06/2026

STAR Level 1

Cloud Controls Matrix

CAIQ Self-assessment v4.1.0

Offers an industry-accepted way to document what security controls exist in IaaS, PaaS, and SaaS services. It provides a set of Yes/No/NA questions and space to justify the response a cloud consumer and cloud auditor may wish to ask of a cloud provider to ascertain their compliance to the Cloud Controls Matrix (CCM).

Created or renewed 1 day ago, on October 06, 2026.