Compliance of cloud databases with 152-FZ
Cloud databases meet the requirements of Federal Law No. 152-FZ "On Personal Data" — you can store and process users' personal data of the first level of security (UZ-1).
In addition to cloud databases, other Selectel cloud platform products also meet the requirements for the first level of security:
- Cloud servers, disks, networks, images, scheduled backups, load balancers;
- Managed Kubernetes;
- Container Registry;
- Object Storage.
If mandatory certification or infrastructure isolation is required, accommodate the certified data center segment.
Areas of responsibility
Responsibility for the information security of personal data and compliance with legal requirements is shared between Selectel and the user.
A list of security measures and more detailed information on areas of responsibility can be seen in Annex 1 and Annex 2 to the Act of evaluation of the efficiency of the measures taken to ensure personal data security for the first level of protection.
User
The user is responsible for the information security of cloud databases:
- provides security for network access to databases;
- organizes access control to database clusters and processed data.
Selectel
Selectel is responsible for the information security of the service infrastructure of the cloud platform and ensures:
- physical security and fault tolerance of equipment (hardware infrastructure);
- Network security of service networks, including cloud database cluster service networks;
- security of the virtualization platform and service servers;
- Cloud database node security.
Cost
Compliance with 152-FZ is included in the cost of cloud databases — read more about payment.
Issue an order for processing personal data
To conclude an order for personal data processing file a ticket.
We will prepare the order and send it to you for signature: in paper form or via electronic document management.