Alibaba Cloud adheres to international information security standards, and we are committed to using international best practices.
Information Security Management Standard
Information Technology Service Management Standard
Business Continuity Management Standard
Quality Management Systems Standard
Code of Practice for Cloud-specific Information Security Controls
CSA Three-tiered Cloud Security Assurance Program
Internal Controls over Financial Reporting
Internal Controls Relevant to Security, Availability and Confidentiality
General Use Report Relevant to Security, Availability and Confidentiality
Alibaba Cloud adheres to domestic information security standards in all regions where we provide cloud products and services.
Cloud Computing Compliance Controls Catalog in Germany
The Trusted Cloud label issued by the Trusted Cloud Competence Network
Multi-Tier Cloud Security System (MTCS) Level 3 IaaS Certification
Multi-Level Protection Scheme (MLPS) tiered protection system: Level III
Trusted Cloud Services accreditation issued by MIIT of China
China National Accreditation Service for Conformity Assessment
National Electronic Security Authority & Information Security Regulation
Security Solutions & Best Practices
Shared Security Responsibilities Model
Alibaba Cloud and its customers are jointly responsible for the security of customers' applications built on Alibaba Cloud.
Alibaba Cloud is responsible for the security of its infrastructure, physical devices, Apsara OS, and cloud services/products, and provides customers with the technical means necessary to protect their cloud applications and data.
Customers who build cloud applications based on Alibaba Cloud services are responsible for protecting their own systems by using the security features of Alibaba Cloud products, Alibaba Cloud Security services, and the third-party security products provided by the Alibaba Cloud security ecosystem.
Learn more at Alibaba Cloud Security Whitepaper>
Alibaba cloud help you to thwart attacks large or small and defend against online or offline threats.
This report tells how cloud security offers the best way to protect your business from cyber threats.
This whitepaper looks at steps to protect your data center infrastructure.