S3 Compliance with 152-FZ
S3 complies with the requirements of Federal Law No. 152-FZ "On Personal Data" — you can store and process users' personal data of the first security level (UZ-1).
In addition to S3, the following Selectel cloud platform products meet the requirements for the first security level:
- Cloud servers, volumes, networks, images, scheduled backups, load balancers;
- Managed Kubernetes;
- Managed databases;
- Container Registry.
If mandatory certification or infrastructure isolation is required, deploy in a certified cloud or certified data center segment.
Areas of responsibility
Responsibility for the information security of personal data and compliance with legal requirements is shared between Selectel and the user.
The list of security measures and more detailed information on the areas of responsibility can be found in Annex 1 and Annex 2 to the Performance Assessment Report on Measures Taken for Personal Data Security for the first security level.
User
The user is responsible for managing access to the buckets in which objects are stored: creating user accounts and assigning access rights.
Selectel
Selectel is responsible for the information security of the S3 service infrastructure and ensures:
- physical security and fault tolerance of equipment (hardware infrastructure);
- network security of service networks;
- security of the virtualization platform and service servers.
Pricing
Compliance with 152-FZ is included in the price of S3.
Draw up a personal data processing order
To conclude a personal data processing order, create a ticket.
We will prepare the order and send it to you for signature: in paper form or via electronic document management.