Compliance of object storage with 152-FZ
Object Storage complies with the requirements of Federal Law No. 152-FZ "On Personal Data" — you can store and process users' personal data of the first level of security (UZ-1).
In addition to object storage, Selectel's cloud platform products meet the requirements for the first level of security:
- Cloud servers, disks, networks, images, scheduled backups, load balancers;
- Managed Kubernetes;
- Cloud databases;
- Container Registry.
If mandatory attestation or infrastructure isolation is required, place in the certified data center segment.
Areas of responsibility
Responsibility for information security of personal data and fulfillment of legal requirements is shared between Selectel and the user.
A list of security measures and more detailed information on areas of responsibility can be found in Annex 1 and Annex 2 of the Act of evaluation of the efficiency of measures taken to ensure the security of personal data for the first level of protection.
User
The user is responsible for managing access to the containers where objects are stored: creating user accounts and assigning access rights.
Selectel
Selectel is responsible for the information security of the object storage service infrastructure and ensures:
- physical security and fault tolerance of equipment (hardware infrastructure);
- network security of service networks;
- security of the virtualization platform and service servers.
Cost
Compliance with 152-FZ is included in object storage cost.
Issue an order for processing personal data
To conclude a personal data processing order file a ticket.
We will prepare the order and send it to you for signature: in paper form or via electronic document management.