Industry Leadership
Strategic Initiatives
CSA's strategic programs driving innovation in AI, cloud, and Zero Trust.
A public-interest 501(c)(3) dedicated to secure and trustworthy AI.




Industry Leadership
Strategic Initiatives
CSA's strategic programs driving innovation in AI, cloud, and Zero Trust.
A public-interest 501(c)(3) dedicated to secure and trustworthy AI.

CSAI FoundationChaptersEventsBlog
Share your insights on how organizations assess, monitor, and manage third-party risks. Take the short survey →

CSA STAR Registry

Security, Trust, Assurance, and Risk Registry

Listings for Umbral Remote

Listings for Umbral Remote

Umbral is an application and desktop publishing platform developed by Desici, a Mexican technology company specializing in cloud infrastructure, business software, and IT services.

Umbral (Umbral Remote) enables organizations to securely deliver Windows and Linux applications and shared desktops to users through any modern web browser (HTML5), without installing client software. It is distributed as installable software under periodically validated licenses, so customers keep their workloads and data on their own infrastructure, while supporting services operated by Umbral run on Cloudflare's global platform.

Security is a core design principle. Umbral is built around:

  • Encrypted connections end to end and zero-trust access through Cloudflare Tunnels
  • Strong authentication, least-privilege access, and tenant segregation
  • Centralized logging and an optional compliance and audit module with full session recording
  • Alignment with the Cloud Controls Matrix (CCM), ISO/IEC 27001 practices, GDPR, and Mexico's Federal Law on the Protection of Personal Data (LFPDPPP)

Desici publishes this CSA STAR Level 1 self-assessment (CAIQ v4.1) to provide customers with transparency into the security and privacy controls behind Umbral.

Umbral Remote

Umbral Remote is a secure application and desktop publishing platform developed by Desici. It lets organizations deliver...

Listed Since: 2026-11-05

CAIQ
Offers an industry-accepted way to document what security controls exist in IaaS, PaaS, and SaaS services. It provides a set of Yes/No/NA questions and space to justify the response a cloud consumer and cloud auditor may wish to ask of a cloud provider to ascertain their compliance to the Cloud Controls Matrix (CCM).