Compliance of Managed Databases with 152-FZ
Managed databases meet the requirements of Federal Law No. 152-FZ "On Personal Data" — you can store and process users' personal data of the first level of security (UZ-1).
In addition to Managed Databases, other Selectel cloud platform products also meet the requirements for the first level of security:
- Cloud servers, volumes, networks, images, scheduled backups, load balancers;
- Managed Kubernetes;
- Container Registry;
- S3.
If mandatory certification or infrastructure isolation is required, host in the certified data center segment.
Areas of responsibility
Responsibility for the information security of personal data and compliance with legal requirements is shared between Selectel and the user.
The list of security measures and more detailed information on the areas of responsibility can be found in Annex 1 and Annex 2 to the Personal Data Security Measures Performance Assessment Report for the first level of security.
User
The user is responsible for the information security of Managed Databases:
- ensures security during network access to databases;
- organizes access control to database clusters and processed data.
Selectel
Selectel is responsible for the information security of the cloud platform service infrastructure and ensures:
- physical security and fault tolerance of equipment (hardware infrastructure);
- network security of service networks, including Managed Database cluster service networks;
- security of the virtualization platform and service servers;
- security of Managed Database nodes.
Cost
152-FZ compliance is included in the cost of Managed Databases — learn more about fees.
Conclude an order for personal data processing
To conclude a personal data processing order, create a ticket.
We will prepare the order and send it to you for signature: in paper form or via electronic document management.