---
title: "Compliance with Security Standards"
sidebar_label: "Compliance with Security Standards"
sidebar_position: 3
description: "Security standards with which Selectel products and infrastructure are compliant"
---

import Formbricks from '@theme/MDXComponents/Formbricks'
import {CustomTable} from 'docs-kit/components'

# Compliance with Security Standards

## International standards and Russian legislation \{#international-standards-and-russian-legislation}

Selectel infrastructure complies with international standards and Russian legislation on information security and personal data protection. You can find more information about the certificates and reports confirming compliance with security requirements on the [Security](https://selectel.ru/about/security/) page on selectel.ru.

Existing Selectel clients can obtain additional documents certifying compliance with the appropriate standards:

* FSTEC orders: threat assessment results;
* PCI DSS: AOC, responsibility matrix;
* GOST 57580: responsibility matrix;
* SOC 2: report.

To request additional documents, [create a ticket](https://my.selectel.ru/tickets/create/).

We confirm that Selectel products comply with security standards and legislative requirements with certificates, accreditations, audit reports, and conclusions — learn more in the [Product Information Security Compliance Matrix](#information-security-compliance-matrix-for-products) section.

## Product Information Security Compliance Matrix \{#information-security-compliance-matrix-for-products}

You can download certificates, attestations, audit reports, and conclusions on the [Security at Selectel](https://selectel.ru/about/security/) page on selectel.ru.

<CustomTable>
  <table data-sticky>
    <thead>
      <tr>
        <th />

        <th>Colocation (placing server equipment)</th><th>Dedicated Servers</th><th>Selectel Cloud Platform</th><th>S3 (S3)</th><th>Managed Databases</th><th>Managed Kubernetes (MKS)</th><th>Container Registry as a Service (CRaaS)</th><th>Dedicated servers in the A-Data Center</th><th>Attested segment of the Selectel Cloud Platform and S3</th><th>Cloud powered by VMware, including DaaS</th>
      </tr>
    </thead>

    <tbody>
      <tr>
        <th>FSTEC Order No. 21 (152‑FZ)</th><td>Efficiency assessment report, UZ-1</td><td>Efficiency assessment report, UZ-1</td><td>Efficiency assessment report, UZ-1</td><td>Efficiency assessment report, UZ-1</td><td>Efficiency assessment report, UZ-1</td><td>Efficiency assessment report, UZ-1</td><td>Efficiency assessment report, UZ-1</td><td>Efficiency assessment report, UZ-1</td><td>Attestation, UZ-1</td><td>Efficiency assessment report, UZ-1</td>
      </tr>

      <tr>
        <th>FSTEC Order No. 17 (GIS)</th><td>✗</td><td>✗</td><td>✗</td><td>✗</td><td>✗</td><td>✗</td><td>✗</td><td>✗</td><td>Attestation, K1</td><td>✗</td>
      </tr>

      <tr>
        <th>AS Guideline</th><td>✗</td><td>✗</td><td>✗</td><td>✗</td><td>✗</td><td>✗</td><td>✗</td><td>Attestation, 1G</td><td>Attestation, 1G</td><td>✗</td>
      </tr>

      <tr>
        <th>GOST 57580</th><td>Conclusion (R=0.91)</td><td>Conclusion (R=0.91)</td><td>Conclusion (R=0.91)</td><td>Conclusion (R=0.91)</td><td>Conclusion (R=0.91)</td><td>Conclusion (R=0.91)</td><td>Conclusion (R=0.91)</td><td>Conclusion (R=0.92)</td><td>Conclusion (R=0.92)</td><td>✗</td>
      </tr>

      <tr>
        <th>ISO 27001, 27017, 27018, GOST R ISO/IEC 27001</th><td>Certificate</td><td>Certificate</td><td>Certificate</td><td>Certificate</td><td>Certificate</td><td>Certificate</td><td>Certificate</td><td>Certificate</td><td>Certificate</td><td>✗</td>
      </tr>

      <tr>
        <th>PCI DSS</th><td>PCI DSS 4.0.1 Service Provider Certificate</td><td>PCI DSS 4.0.1 Service Provider Certificate</td><td>PCI DSS 4.0.1 Service Provider Certificate</td><td>PCI DSS 4.0.1 Service Provider Certificate</td><td>PCI DSS 4.0.1 Service Provider Certificate</td><td>PCI DSS 4.0.1 Service Provider Certificate</td><td>PCI DSS 4.0.1 Service Provider Certificate</td><td>PCI DSS 4.0.1 Service Provider Certificate</td><td>PCI DSS 4.0.1 Service Provider Certificate</td><td>✗</td>
      </tr>

      <tr>
        <th>GDPR</th><td>Possibility to conclude DPA and SCC with the client</td><td>Possibility to conclude DPA and SCC with the client</td><td>Possibility to conclude DPA and SCC with the client</td><td>Possibility to conclude DPA and SCC with the client</td><td>Possibility to conclude DPA and SCC with the client</td><td>Possibility to conclude DPA and SCC with the client</td><td>Possibility to conclude DPA and SCC with the client</td><td>Possibility to conclude DPA and SCC with the client</td><td>Possibility to conclude DPA and SCC with the client</td><td>Possibility to conclude DPA and SCC with the client</td>
      </tr>

      <tr>
        <th>SOC 2® Type I</th><td>✗</td><td>✗</td><td>✗</td><td>✗</td><td>✗</td><td>✗</td><td>✗</td><td>Report</td><td>✗</td><td>✗</td>
      </tr>
    </tbody>
  </table>
</CustomTable>

## Personal data \{#personal-data}

In accordance with the requirements of Federal Law No. 152-FZ and the GDPR, you can entrust Selectel with the processing of personal data. The list of actions Selectel performs as a data processor on your behalf includes storage and destruction. To execute a processing agreement under 152-FZ or a DPA, SCC under the GDPR, [create a ticket](https://my.selectel.ru/tickets/create/).

## Types of information security tools according to security levels and GIS classes \{#matrix-of-compliance-with-security-requirements-for-types-of-information-protection-measures}

The table summarizes the basic composition of required information security tools (IS tools) that Selectel can provide as services.

The composition of information security tools for a personal data information system (PDIS) can be modified based on technical specifics of the system, threat models, and the information security intruder model.

The necessity of cryptographic protection for ISPDn is determined by the threat model and depends on the possibility of neutralizing threats by other means. Cryptographic protection for GIS is always used, regardless of the security level and class of the system, if the system meets one or more of the following conditions:

* communication channels that extend beyond the controlled zone exist;
* information can only be protected using cryptographic information security tools;
* legal validity of electronic documents and their protection against alteration is required.

The decision regarding the adequacy of applied information security tools is made by the information system owner or the FSTEC licensee conducting the attestation.

<CustomTable>
  <table>
    <tbody>
      <tr>
        <th rowspan="2" />

        <th colspan="4">Personal Data Information System (PDIS) security level (FSTEC-21)</th><th colspan="3">GIS class (FSTEC-17)</th><th rowspan="2">Information security tools available from Selectel</th>
      </tr>

      <tr data-text-center>
        <th>SL 4</th><th>SL 3</th><th>SL 2</th><th>SL 1</th><th>C 3</th><th>C 2</th><th>C 1</th>
      </tr>

      <tr>
        <th>
          Protection against unauthorized access
        </th>

        <td data-text-center>✓</td><td data-text-center>✓</td><td data-text-center>✓</td><td data-text-center data-border-right>✓</td>

        <td data-text-center>✓</td><td data-text-center>✓</td><td data-text-center data-border-right>✓</td><td>The choice of security tool depends on the OS on the server.<br />For Windows [Secret Net Studio](/certified-security-features/secret-net-studio.mdx), for Linux [Secret Net LSP](/certified-security-features/secret-net-lsp.mdx)</td>
      </tr>

      <tr>
        <th>Trusted boot</th><td data-text-center>✗</td><td data-text-center>✗</td><td data-text-center>✓</td><td data-text-center data-border-right>✓</td>

        <td data-text-center>✗</td><td data-text-center>✓</td><td data-text-center data-border-right>✓</td><td>[Dallas Lock SIS](/certified-security-features/dallas-lock.mdx) `*`.<br />[Sobol Hardware-Software Module](/certified-security-features/pac-sobol.mdx) ` **`</td>
      </tr>

      <tr>
        <th>Firewalling</th><td data-text-center>✓</td><td data-text-center>✓</td><td data-text-center>✓</td><td data-text-center data-border-right>✓</td>

        <td data-text-center>✓</td><td data-text-center>✓</td><td data-text-center data-border-right>✓</td><td>[UserGate](/firewalls/usergate/).<br />Host-based firewall included in [Secret Net Studio](/certified-security-features/secret-net-studio.mdx) and [Secret Net LSP](/certified-security-features/secret-net-lsp.mdx)</td>
      </tr>

      <tr>
        <th>Antimalware protection</th><td data-text-center>✓</td><td data-text-center>✓</td><td data-text-center>✓</td><td data-text-center data-border-right>✓</td>

        <td data-text-center>✓</td><td data-text-center>✓</td><td data-text-center data-border-right>✓</td><td>[Kaspersky](/certified-security-features/kaspersky-endpoint-security.mdx).<br />Antivirus protection module included in [Secret Net Studio](/certified-security-features/secret-net-studio.mdx)</td>
      </tr>

      <tr>
        <th>IDS/IPS</th><td data-text-center>✗</td><td data-text-center>✗</td><td data-text-center>✓</td><td data-text-center data-border-right>✓</td>

        <td data-text-center>✗</td><td data-text-center>✓</td><td data-text-center data-border-right>✓</td><td>Intrusion detection system included in [UserGate](/firewalls/usergate/).<br />Host-based IDS included in [Secret Net Studio](/certified-security-features/secret-net-studio.mdx)</td>
      </tr>

      <tr>
        <th>Vulnerability identification</th><td data-text-center>✗</td><td data-text-center>✗</td><td data-text-center>✓</td><td data-text-center data-border-right>✓</td>

        <td data-text-center>✗</td><td data-text-center>✓</td><td data-text-center data-border-right>✓</td><td>[Vulnerability Scanning](/vulnerability-analysis/) service</td>
      </tr>

      <tr>
        <th>Cryptographic protection</th><td data-text-center>✓</td><td data-text-center>✓</td><td data-text-center>✓</td><td data-text-center data-border-right>✓</td>

        <td data-text-center>✓</td><td data-text-center>✓</td><td data-text-center data-border-right>✓</td><td>[GOST-VPN](/gost-vpn/) service</td>
      </tr>

      <tr>
        <th>SIEM</th><td data-text-center>✗</td><td data-text-center>✗</td><td data-text-center>✗</td><td data-text-center data-border-right>✗</td>

        <td data-text-center>✗</td><td data-text-center>✗</td><td data-text-center data-border-right>✓</td><td>RuSIEM, provided as a license</td>
      </tr>

      <tr>
        <th>Anti-DDoS<br />WAF<br /><br />The need for anti-DDoS tools depends on the types of threats</th><td data-text-center>✗</td><td data-text-center>✗</td><td data-text-center>✗</td><td data-text-center data-border-right>✗</td>

        <td data-text-center>✗</td><td data-text-center>✗</td><td data-text-center data-border-right>✗</td><td>Free basic [Selectel protection](/anti-ddos/ddos-selectel.mdx) against L3-L4 DDoS attacks.<br />Partner solutions — L3-L7 protection from [DDoS-Guard](/anti-ddos/ddos-guard.mdx) and [Curator](/anti-ddos/curator.mdx).<br />WAF [tools](/waf/)</td>
      </tr>

      <tr>
        <th>Backup system</th><td data-text-center>✗</td><td data-text-center>✗</td><td data-text-center>✗</td><td data-text-center data-border-right>✗</td>

        <td data-text-center>✗</td><td data-text-center>✗</td><td data-text-center data-border-right>✗</td><td>[Cloud backup](/cloud-servers/backups/backup-methods.mdx).<br />[Dedicated server backup](/dedicated/manage/backups.mdx).<br />[Cyber Backup Cloud](/cyber-backup/about/about-cyber-backup.mdx)</td>
      </tr>
    </tbody>
  </table>
</CustomTable>

`*` Dallas Lock SIS holds an FSTEC of Russia certificate and can be used for system attestation according to GIS data protection requirements.

` **` Sobol hardware-software module holds FSB and FSTEC of Russia certificates and can be used to increase the cryptographic protection class to KC2 and KC3.

<Formbricks />