Skip to main content

Compliance of cloud servers with 152-FZ

Last update:

Cloud servers, volumes, images, scheduled backups, and load balancers meet the requirements of Federal Law No. 152-FZ "On Personal Data" — you can store and process users' personal data of the first level of security (UZ-1).

In addition to cloud servers, other products of the Selectel cloud platform also meet the requirements for the first level of security:

If mandatory certification or infrastructure isolation is required, use the certified cloud or certified data center segment.

Areas of responsibility

Responsibility for the information security of personal data and compliance with legal requirements is shared between Selectel and the user.

The list of security measures and more detailed information on areas of responsibility can be found in Annex 1 and Annex 2 to the Performance Assessment Report on Measures to Ensure Personal Data Security for the first level of security.

User

The user is responsible for the information security of their own information systems, which they host on the Selectel cloud platform:

  • secures cloud servers, including operating systems and applications;
  • provides network security for the networks that are created;
  • organizes access control to cloud platform resources and processed data.

Selectel

Selectel is responsible for the information security of the service infrastructure of the cloud platform and ensures:

  • physical security and fault tolerance of equipment (hardware infrastructure);
  • network security of service networks;
  • security of the virtualization platform and service servers.

Pricing

152-FZ compliance is included in the cost of cloud servers — learn more about the cloud platform payment model.

Conclude a personal data processing order

To conclude a personal data processing order, create a ticket.

We will prepare the order and send it to you for signature: in paper form or via electronic document management.