SLS security and compliance overview - Simple Log Service

SLS supports server-side encryption, fine-grained access control, service logs, and data insights to meet data security and compliance requirements. Log Audit Service automatically collects and audits Alibaba Cloud service logs in real time across multiple accounts in a centralized manner. Raw log data stored in SLS is immutable.

Compliance certifications

SLS holds the following certifications:

ISO 9001, ISO 20000, ISO 27001, ISO 27017, ISO 27018, ISO 22301, ISO 27701, and ISO 29151
BS10012
CSA STAR
MLPS level 3
SOC
C5
Hong Kong Standard on Auditing (HKSA)
Philippine Standards on Auditing (PSA)
MTCS
OSPAR
PCI DSS

Security capabilities

SLS provides the following security features.

Feature	Description
Access control	Manage resource access with RAM policies and STS temporary credentials.
Encryption of data in transit	Supports server-side encryption and SSL/TLS encrypted transmission to protect data on the cloud.
Data reliability	The storage system uses a three-replica mechanism for high reliability.
Monitor and audit Simple Log Service	Service logs and CloudMonitor integration enable monitoring and auditing of your data.
Log auditing for cloud services	Automatically collects and audits logs from Alibaba Cloud services in real time across multiple accounts in a centralized manner.