cloudtrustpartners.com

What It Is

CloudTrust Inc USA is a compliance-driven IT and cybersecurity consulting firm based in Florida, USA. Its services cover IT compliance, AWS cloud engineering, FileCloud zero-trust file sharing, NIST 800-171/CMMC remote work solutions, SOC and HIPAA attestations, Fractional CISO services, and incident response planning. It is not a single security product vendor, but rather a project-based service provider focused on consulting, design, deployment, remediation, audit attestation, and support.

Core Capabilities and Protection Scope

Based on the available content, its main protection scenarios are compliance security and cloud security. Its AWS WorkSpaces remote work solution includes MFA, encryption in transit and at rest, tamper-evident logs, separation of duties, alerts, SSP documentation, training policies, and configuration management. The implementation checklist also includes multi-AZ VPCs, redundant gateways and subnets, Route 53, FreeRadius MFA, AWS Managed Directory, AD Connector, security groups, AWS Config, IAM password policies, VPC Flow Log, API activity monitoring, and real-time CloudWatch alerts. On the FileCloud side, the focus is on zero-trust file sharing, data governance, data loss prevention, retention policies, and digital rights management.

Compliance, Deployment, and Integration

CloudTrust covers a broad range of compliance frameworks, including HIPAA, NIST 800-171, CMMC, NIST 800-53, SOC 1/2/3, SSAE 18, FedRAMP, StateRAMP, ISO, GDPR, HITRUST, PCI-DSS, and more. Deployment options span on-premises infrastructure remediation, AWS/AWS GovCloud environments, AWS WorkSpaces virtual desktops, and the FileCloud content collaboration system. Its integration capabilities are engineering-oriented, involving AD, DUO MFA, Microsoft/Google document formats, and development stacks such as React, Vue, Python, Go, and REST.

Pricing and Best Fit

The website does not disclose pricing, plans, payment methods, or SLA details, so it appears to use custom project-based quotes. It is best suited for U.S. DOD contractors, healthcare-related companies, organizations that need to protect CUI, teams preparing for SOC 2/HIPAA/FedRAMP projects, and small contractors that cannot afford a full-time CISO but still need a compliance office function.

Pros, Cons, and Access from China

Its strengths are end-to-end coverage from gap assessment, architecture design, and deployment to audit attestation, with an emphasis on U.S.-based engineers and AICPA-certified auditors. Its weaknesses are limited information transparency, unclear pricing and delivery boundaries, no public details on the Blue Mermaid project, and no explanation of China network access, payments, or local compliance. Access from China cannot be confirmed from the available text. If Chinese companies have similar needs, they would typically consider security and compliance services from domestic cloud providers, MLPS assessment agencies, or local zero-trust/file collaboration solutions.