•识别Varonis SaaS平台(“系统”)并描述系统的边界。•确定我们的主要服务承诺和系统要求。•确定将威胁到我们系统目标的主要服务承诺和服务要求的风险。•识别,设计,实施,操作和监视Varonis平台(系统)的有效控制,以减轻威胁实现主要服务承诺和系统要求的风险。•选择作为我们主张的基础的信托服务类别。We assert that the controls over the system were effective throughout the period August 1, 2023, to July 31, 2024, to provide reasonable assurance that the principal service commitments and system requirements were achieved, based on the criteria relevant to security, availability and confidentiality set forth in the AICPA's TSP Section 100 2017 Trust Services Principles and Criteria for Security, Availability, Processing Integrity, Confidentiality, and Privacy (2016).