Grant date: 2017-03-06 Valid to: 2018-02-06
UCloud goes global, but is security going with them?While UCloud is expanding their business outside China territories and providing cloud services already in the United States and Germany, ensuring the same level of security of their services abroad seems to be a bit of challenge. We noticed that some of the services they offer in the Chinese market appear not be available for US based customers. UCloud state that "all their datacentre" comply with the law of the People of the Republic of China. If that includes datacenters abroad, this would be in conflict with the local regulations of the abroad locations. UCloud have also been certified against the national Information Security Protection standard of China, but there is no indication that their oversees datacentres are in scope of this certificate. But even if it does, the question is whether this Chinese standard has any appreciation in the US or in the European Union.
Additional information:UCloud Information Security Rating Report - External Assessment
In the external rating report, you will find IISRI’s opinion on how the cloud provider ensures Privacy and Intellectual property rights of tenants. IISRI discusses and analyses further if and how the cloud provider uses and provides encryption to protect data of their tenants. As for physical security IISRI considers different environmental risks, like earthquakes and floods, especially since in most cases cloud providers disclaim any kind of liability for force majeure events. IISRI will also then elaborate on the cloud provider’s capability to cope with outages and to provide their tenants different types of failover options within and outside their location. In this report, you will also find IISRI’s analysis of human resource security and security compliance with standards of the cloud provider. IISRI forms also an opinion about the cloud provider’s capability to manage vulnerabilities and security incidents. The report also depicts IISRI’s analysis of the cloud provider’s service levels to ensure the appropriate level of security to their tenants and otherwise compensations according to best practices. This and many other security aspects are discussed in this report. You can buy the rating report below.
See a sample page of our reports
Show rating scope