Information Security and Compliance

With top-notch security compliance capabilities and a well-rounded consulting and support system, Alibaba Cloud provides one-stop consulting services to help customers comply with local regulations effortlessly and economically.

Business Challenges

Like the U.S. Privacy Shield framework and the European General Data Protection Regulation (GDPR), China’s Cybersecurity Law (2017) has deeply impacted the regulatory environment and increased the factors that need to be considered when doing business in a major market.

Classified Cybersecurity Protection

Protect your system and data with compliant protection measures in a tiered way.

Risk & Vulnerability Management

Monitoring and managing risks to ensure information security and business continuity.

Cross-board Data Transfer

Meeting complex requirements for data collection and transfer.

Personal Information Protection

Protecting customer information and defending against fraud.

Business Licensing Requirements

Accelerate the compliant online services setup in China.

Business Risk Management

Manage the risks of the online assets and be with compliant with identity verification.

Why Partner with Alibaba Cloud

As the cloud provider with the most significant market share in China, Alibaba Cloud is well-positioned to assist customers in navigating the regulatory environment in China efficiently and economically.

One-stop Compliance Service

From Compliance Strategy through Execution, we will be there to offer step-by-step assistance.

Comprehensive Certification Coverage

Our comprehensive certification coverage facilitates a smooth entry into China and other global markets.

Market-tested Experience

After over 18 years supporting Alibaba’s compliance, more than 1 million businesses have been assisted with security and compliance services in China.

Top-notch Professional Partners

Alibaba Cloud provides a robust ecosystem that includes industry associations, security software, hardware, compliance consulting, and state-of-the-art solutions.

Speak with Our Professionals to Learn More

Contact Us

Cybersecurity Law Overview

Alibaba Cloud is committed to developing services to help customers and business partners comply with the Cybersecurity Law while progressively reducing their workload and costs.

Tailored Compliance Solutions

Classified Cybersecurity Protection

  • Compliance Requirement

    The Cybersecurity Law defines the obligation of the network operator in cybersecurity protection with a tiered concept and implements security measures according to the classified protection scheme.

  • Our Solutions

    As a pioneer in Classified Cybersecurity Protection compliance, Alibaba Cloud empowers our customers to be compliant with exclusive insights, sharing resources, comprehensive security product and service portfolios, and a one-stop advisory service.

Risk & Vulnerability Management

  • Compliance Requirement

    The Cybersecurity Law requires the network operators to manage the cyber risks and vulnerabilities with the security measures in a well-rounded way. These measures include any preventive, detective, and corrective mechanisms to address the vulnerability, virus, attacks, and intrusions.

  • Our Solutions

    Alibaba Cloud's security products and services are committed to providing simple, secure, and intelligent security services based on our extensive, accumulated experiences. Alibaba Cloud security services enable you to protect your information and systems with the comprehensive preventive, detective, and corrective mechanisms.
    Our security services include Managed Security Service, Professional Safeguard, Penetration Test, Emergency Response.

  • Security Services

    Alibaba Cloud's security services include Managed Security Service, Professional Safeguard, Penetration Test, and Emergency Response.

Cross-Border Data Transfer

  • Compliance Requirement

    The Cybersecurity Law makes it clear that under certain circumstances “Personal information and important business data… shall be stored in Mainland China”, and has detailed requirements on cross-border data transfer, which covers various data scenarios in business operation practice, such as customer data and confidential data. In addition, only qualified network products and services shall be applied with the necessary security measures implemented.

  • Our Solutions

    Alibaba Cloud provides a comprehensive data cross-border solution that includes the risk assessment advisory services with our reputable ecosystem partners and the comprehensive network products. Together, these solutions allow for compliant data cross-border practices.

Personal Information Protection

  • Compliance Requirement

    The Cybersecurity Law stipulates the requirements in personal data protection and emphasizes the technical measures to prevent, detect, and remediate any risks or potential risks in personal data protection.

  • Our Solutions

    The Alibaba Cloud data security solution speeds up the implementation of necessary technical measures in protecting personal data with our comprehensive security products such as Sensitive Data Discovery & Protection (SDDP) and Key Management Services (KMS).

Business Licensing Requirements

  • Compliance Requirement

    According to the Measures for the Administration of Internet Information Services, all websites and mobile apps hoping to provide services in Mainland China must first obtain ICP registration to operate lawfully.

  • Our Solutions

    We help customers with a comprehensive solution to build a website that is optimized for China including Domain Registration and ICP Registration services. We work closely with our partners to provide a one-stop solution for customers to accelerate their process of building a China-ready business.

Business Risk Management - Real Identity Verification

  • Compliance Requirement

    The Cybersecurity Law has very detailed requirements in this area. For many businesses, a major concern would be Real Identity Verification. If you are doing business in a large, complicated, and growing market, it is always challenging to defend against fraud and hacking. It is especially important if you are in the e-commerce, finance, logistics, hospitality, or entertainment industries.

  • Our Solutions

    To defend against fraudulent activities, facial recognition and real identity verification can be used widely and for a variety of purposes. Real Identity Verification is an ID authentication solution that leverages the Alibaba Cloud Facial Recognition and Big Data risk management model to detect identity fraud.

Business Risk Management - Content Security and Compliance

  • Compliance Requirement

    The Cybersecurity Law requests businesses to make sure their websites do not host superstitious, sexually suggestive, violent, or gambling-related content. This is especially challenging if a business hosts User Generated Content (UGC) online.

  • Our Solutions

    The Content Moderation service leverages Deep Learning technology and benefits from Alibaba's years of Big Data analysis to provide accurate monitoring of pictures, video, text, and other multimedia content. Constant automated moderation responds in less than 0.1 seconds with an accuracy rate of 95% or higher.

Resources

Whitepaper

Understanding China's Cybersecurity Law

Through analysis of seven major obligations to see how we stay compliant with CSL.

Whitepaper

Smoothing ICP Registration

Guide through legal and technical steps to hosting a website Mainland China.

Whitepaper

Compliance in the Digital World

A speech slides by the Head of Security Compliance and Privacy, Alibaba Cloud.

Webinar

Under the New Cybersecurity Law

What you need to know to keep your company compliant under China’s CSL.

Webinar

Cybersecurity Compliance Solutions

Introducing our one-stop solution to comply with cybersecurity regulations in China.

Webinar

ICP Registration Guide

Latest requirements for registering an ICP license to host a website in Mainland China.

Blog

How China Is Different - Security and Compliance

How you should navigate through China's unique security and compliance policies.

Blog

Navigating Through CSL

How Alibaba Cloud's platform helps compliance with China's cybersecurity legislation.

Blog

How to obtain ICP in China?

Q&A from "Alibaba ICP expert online" campaign.

Related Links

Security & Compliance

Look into our Trust Center to get a comprehensive understanding of Alibaba Cloud Security and Compliance portfolio.

China Gateway

Explore more details about how Alibaba Cloud can enable your business success in China.

Speak with Our Professionals to Learn More

Contact Us