Skip to main content

Information security when using Selectel services

Selectel ensures the information security of its products and services from the moment of account registration in the control panel until account deletion.

Selectel is not responsible for the security of information that is posted and stored by customers on Selectel products, services, and offerings.

Personal data

Selectel maintains the confidentiality of the personal data you provide when you create an account in the Control panel and provides it in any available form upon your request.

We may print your personal data to comply with legal requirements or upon your request, for example, to prepare paper copies of contracts and acts between us.

We can disclose personal data to third parties only in accordance with legal requirements if we receive a legally binding request. Data disclosure to third parties will be logged with information about what data was disclosed, to whom, and at what time.

If we receive such a request, provided there are legal grounds and no conflicts with legal requirements, we will send information about this in a ticket. We will do this no later than 30 days from the moment of personal data disclosure.

Account and its compromise

If you experience problems accessing your account, you can restore access to your account.

If the account has been compromised or you suspect a compromise:

Access management

Other users' access to Selectel products and services is managed by the Account Owner.

User access permissions are differentiated through user roles, which define access within each user type.

Learn more about access management in the Access separation section.

Use of services

Information about the use of Selectel services, products, and offerings is confidential. Access to this information is strictly regulated, and only secure communication channels are used for transmission.

Virtualization security

Selectel ensures the security of virtualization technologies against unauthorized access to information and data leakage. To do this, vulnerability management, antivirus protection, and access control technologies and tools are applied at the service infrastructure and virtualization system level, including privileged user activity monitoring and protection against network attacks.

Customer infrastructure isolation

Every Selectel customer's infrastructure is isolated on several levels:

  • control panel level;
  • infrastructure level.

Infrastructure objects are created, modified, and deleted by the platform's tools. Compute resources allocated for such objects are assigned to the customer and are not used in infrastructures belonging to other customers. Depending on the specifics of the service, product, or offering, isolation is performed at the physical or logical level. Virtual resources are isolated at the virtualization environment level, and dedicated server resources are isolated at the hardware and network level.

Temporary file deletion

Temporary files processed by Selectel infrastructure objects do not contain personal data. Upon completion of work with an infrastructure object, temporary files are automatically deleted by platform components.

The deletion of temporary files created and stored in Selectel products, services, and offerings when you use them is your responsibility.

Use of cryptographic protection tools

Selectel infrastructure objects interact via secure protocols with authentication using digital certificates. For security during data transmission, users connect to the Control panel and API via reliable protocols.

For additional data security, use your own cryptographic protection tools.

For remote access to the Selectel infrastructure using GOST encryption algorithms, enable the GOST VPN service.

Security during service development

When developing services, we:

  • analyze the security of the designed architecture and the specifics of the solutions used;
  • implement security requirements, policies, and industry best security practices at every stage of the development lifecycle;
  • test the implementation of security requirements formed at the stage of building the service architecture or when changes are made to it;
  • conduct training and regularly improve the qualifications of employees in the field of information security in their specific areas of activity.

Vulnerability management

We regularly analyze the security of the infrastructure of our products, services, and offerings: we conduct internal and external scanning and penetration tests. This allows us to detect vulnerabilities and resolve them faster.

For more details on the division of information security responsibilities between us and the customer, as well as the security measures applied, see the Security page on selectel.ru.

Notifications about changes, vulnerabilities, and incidents

Information about service availability and the schedule of maintenance work is displayed on the status page.

Additionally, in the control panel, you can configure account notifications. They alert you about maintenance, changes, failures, and vulnerabilities that may affect infrastructure availability and its security.

To ensure that potential consequences of information security breaches are minimized, Selectel has organized an information security incident management process, which includes:

  • analysis of monitoring system events, as well as reports from employees, customers, and regulatory authorities;
  • identification of IS incidents and analysis of the causes of their occurrence;
  • response to IS incidents;
  • prevention of incident recurrence.

Customers can report information security incidents via a ticket.

Further work on the incident will depend on whose area of responsibility it falls into.

If an incident falls under Selectel's area of responsibility and can harm the infrastructure, we will respond to it independently. If necessary, we will provide information about the incident if it has affected you. We will do this via a ticket or account notifications.

If the incident is your responsibility, you must respond to it yourself. Where possible, we will assist you in gathering information about the incident as part of technical support.

In the event of an incident involving unauthorized access to personal data or its processing facilities that may lead to the loss, disclosure, or alteration of personal data, we immediately notify all affected clients. We will do this via a ticket or account notifications.

Information labeling

Selectel does not provide information labeling services. The necessity and methods of labeling information, as well as responsibility for the security of data placed in Selectel products, services, and offerings, are your area of responsibility.

Use of utilities capable of bypassing security procedures

When working with Selectel products and services, it is prohibited to use software that can bypass security procedures or generate an abnormal load on products and services. If you use such software to analyze the security of your systems, its use can be agreed upon via a ticket.

We prohibit the use of our products, services, and offerings for malicious activity: distributing malware, distributing software or other data in violation of intellectual property rights, cyberattacks, etc.

Deletion of customer data

You can delete your account and the data stored on Selectel infrastructure yourself at any time.

If you cancel products or services, or do not pay for them on time, we will automatically destroy all data stored in the Selectel infrastructure within the timeframe established by the "Terms of Use for Individual Services" document for the specific product or service. You can view them on the Documents page on selectel.ru.

The terms and conditions for deleting customer personal data are defined in the Personal Data Processing and Protection Policy.

Documents

View the terms of agreements for individuals and legal entities, as well as appendices to agreements on the Documents page on selectel.ru.

For each document, we keep the previous version in the Document archive section.