Compliance of Managed Kubernetes with 152-FZ
Managed Kubernetes complies with the requirements of Federal Law No. 152-FZ "On Personal Data" — you can store and process users' personal data of the first level of security (UZ-1).
In addition to Managed Kubernetes, other products in the Selectel cloud platform meet the requirements for Level 1 security:
- Cloud servers, volumes, networks, images, scheduled backups, load balancers;
- Managed Databases;
- Container Registry;
- S3.
Areas of responsibility
Responsibility for the information security of personal data and compliance with legal requirements is shared between Selectel and the user.
The list of security measures and more detailed information about the areas of responsibility can be found in Appendix 1 and Appendix 2 to the Assessment Report on the Effectiveness of Measures Taken to Ensure Personal Data Security for Security Level 1.
User
The user is responsible for the information security of their own infrastructure based on Managed Kubernetes clusters:
- secures Managed Kubernetes worker nodes, including operating systems and applications;
- provides network security for the networks that are created;
- organizes access control to worker nodes, applications, and processed data.
Selectel
Selectel is responsible for the information security of the service infrastructure of the cloud platform and ensures:
- physical security and fault tolerance of equipment (hardware infrastructure);
- network security of service networks, including Managed Kubernetes cluster service networks;
- security of the virtualization platform and service servers;
- security of the Managed Kubernetes cluster master nodes.
Cost
Compliance with Federal Law No. 152-FZ is included in the cost of Managed Kubernetes — learn more about billing.
Execute a personal data processing order
To conclude a personal data processing agreement, create a ticket.
We will prepare the agreement and send it to you for signature in paper form or via electronic document management.