Shared Responsibility for Security

Security and compliance are shared responsibilities between UCloud and its customers. This shared responsibility model helps alleviate the operational burden on customers, as UCloud is responsible for operating, managing, and controlling the hosting operating system, virtualization layer components, and even the physical security of service-operating facilities. Customers are responsible for managing guests, business systems (including system updates and security application updates), other related application services, and the external firewall rules of the security group provided by UCloud. Customers should carefully consider the application services they need to deploy, as the responsibilities they need to assume vary depending on the application services used and the environmental integration and applicable laws and regulations in the region where the service is oriented. The following table distinguishes the responsibilities shared between UCloud cloud and its tenants:

Security Responsibilities of Cloud Vendor

UCloud is only responsible for the security control and management of the cloud operating system, physical equipment resources, infrastructure, and cloud services and products. This is based on high-availability best practices, secure cloud products, secure compliance services, and a multi-dimensional security protection system for infrastructure and platform, application, identity management, and resource access control, ensuring operational and maintenance safety. It includes disclaimers.

Security Responsibilities of Cloud Users

Cloud users construct cloud applications based on the services provided by UCloud cloud and utilize UCloud’s secure cloud products and security services, as well as third-party security products from the security ecosystem, to protect their business systems. Cloud users are responsible for custom configuration, self-deployment, operations, and maintenance of networks, systems, applications, management, data, security, and other services used on the cloud platform. Cloud users are responsible for safe use of the cloud platform, ensuring secure design, data protection, authentication encryption, and other necessary security measures and functions, managing account passwords and personnel authorization, and securely developing applications and operating businesses.