Data Processing Agreement

mapato

Chibvumirano ichi chekugadzirisa data ("DPA" kana "Chibvumirano") chinopinzwa mukati na uye pakati pe:

Mutongi wedata ("Mutongi" kana "Mutengi")

Mugadziri weData (“Mugadziri” kana “Xygeni”):

Mutongi neProcessor zvinozonzi "Bato" uye pamwe chete se "Mapato".

DPA iyi inoumba chikamu cheChibvumirano Chebasa Guru kana Terms of Service ("Chibvumirano Chikuru") pakati peMapato anotonga chikamu cheXygeni chekuchengetedzwa kwekushandiswa kwayo uye software supply chain security masevhisi ("Masevhisi"). Kana paine kusawirirana pakati peDPA iyi neChibvumirano Chikuru, DPA iyi ndiyo ichatonga panyaya dzekuchengetedzwa kwedata.

1. Tsanangudzo

Nekuda kweDPA iyi:

• "GDPR" zvinoreva Mutemo (EU) 2016/679 weParamende yeEurope neDare reDare ra27 Kubvumbi 2016 pamusoro pekuchengetedzwa kwevanhu venyama maererano nekushandiswa kweruzivo rwemunhu.
• "LOPDGDD" zvinoreva Ley Orgánica 3/2018, de 5 de diciembre, de Protección de Datos Personales y garantía de los derechos digitales.
• "Data reMunhu", "Kugadzirisa", "Mutongi", "Mugadziri", "Sub-processor", "Mutongi weData", "Dare reKutarisira", "Kutyorwa kweData reMunhu" zvinofanira kunge zvichirehwa nazvo muGDPR.
• "Customer Data" zvinoreva chero Ruzivo Rwemunhu rwunotumirwa na kana panzvimbo yeMutongi kuMasevhisi, kana kugadziriswa neProcessor panzvimbo yeMutongi maererano neMasevhisi.
• "Sub-processor" zvinoreva chero bato rechitatu rinoshandisirwa neProcessor, nemvumo yekutanga kubva kuController (sezvakatsanangurwa muClause 7), kugadzirisa Data reVatengi panzvimbo yeController.
• "MaSCC" zvinoreva iyo Standard Zvibvumirano zvekutumira ruzivo rwemunhu kune dzimwe nyika zvichienderana neGDPR, sezvakatenderwa neEuropean Commission Implementing Decision (EU) 2021/914 ya4 Chikumi 2021.
• "Mabasa" zvinoreva iyo application security posture management, software supply chain security, kuonekwa kwenjodzi uye masevhisi ane chekuita nayo anopiwa neXygeni kuMutongi pasi peChibvumirano Chikuru.
• "Mutemo Unoshanda weDziviriro yeData" zvinoreva GDPR, LOPDGDD, uye chero mimwe mitemo yenyika yekudzivirira data sezvakagadziriswa nguva nenguva.

2. Mabasa eMapato

Mapato anobvuma uye anobvumirana kuti:

• Mutongi ndiye anotarisira data maererano neData reVatengi uye ane basa rekuona zvinangwa uye nzira dzekugadzirisa Data reVatengi rinotumirwa kuSevhisi.
• Processor inoshanda semugadziri wedata maererano neData reVatengi uye inogadzirisa data rakadaro chete pachinzvimbo uye zvichienderana nemirairo yakanyorwa yeMutongi.
• Bato rega rega rinofanira kutevedzera zvarinosungirwa pasi peMutemo weKudzivirira Data unoshanda mubasa raro seMutongi kana Mugadziri.

Apo Xygeni inoshandisa ruzivo rwemunhu nekuda kwezvinangwa zvayo (semuenzaniso, manejimendi yeakaundi, kubhadharisa, ongororo yekuvandudza masevhisi), inoshanda seMutongi akazvimiririra. Kugadziriswa kwakadaro kunotongwa neMutemo weKuchengetedzwa Kwemashoko eXygeni uye kuri kunze kwechirongwa cheDPA iyi.

3. Nyaya, Hunhu uye Chinangwa Chekugadzirisa

Nyaya yacho, rudzi rwayo, nguva uye chinangwa chekugadzirisa, pamwe chete nemarudzi eData reMunhu rakagadziriswa uye mapoka eVanhu Vane Data, zvakatsanangurwa muSchedule 1 (Mashoko Ekugadzirisa) yeDPA iyi.

Mushandisi wedata anofanira kugadzirisa Data reVatengi chete kusvika padanho rinodiwa kuti ape Masevhisi anotsanangurwa muChibvumirano Chikuru uye zvichienderana nemirairo yakanyorwa yeMutongi, kunze kwekunge zvichidikanwa kuti zviitwe nemutemo unoshanda. Muchiitiko chakadaro, Mushandisi wedata anofanira kuzivisa Mutongi nezvechinodiwa chemutemo ichocho asati agadzirisa, kunze kwekunge zvichirambidzwa nemutemo nekuda kwezvikonzero zvakakosha zveveruzhinji.

4. Mirayiridzo yeMutongi

Mutongi anorayira Processor kuti igadzirise Data reVatengi sezvinodiwa kuti: (a) ipe Masevhisi zvinoenderana neChibvumirano Chikuru; (b) itevedzere mirairo yeMutongi inotumirwa nekunyora nguva nenguva; uye (c) iite zvinosungirwa neProcessor pasi peDPA iyi.

Mushandi weProcessor anofanira kuzivisa Controller nekukurumidza kana, maererano nemaonero emushandi weProcessor, murairo unobva kuController uchityora Mutemo weKudzivirira Data Unoshanda. Muchiitiko chakadaro, mushandi weProcessor ane kodzero yekumira kugadzirisa zvichienderana nemurairo iwoyo kusvika Mushandi weProcessor ajekesa kana kugadzirisa murairo wacho.

Mutongi anopa gwaro uye anomiririra kuti: (a) ine hwaro hwepamutemo hwakakodzera pasi peGDPR Art. 6 (uye, pazvinoshanda, Art. 9) yekugadzirisa Ruzivo Rwemunhu rwakakodzera; (b) yakapa zviziviso zvese zvinodiwa uye yakawana mvumo yese inodiwa; uye (c) kuendesa Ruzivo rweMutengi kuProcessor hakutyori chero mitemo inoshanda.

5. Zvisungo zveProcessor

5.1 Zvirambidzo zvekugadzirisa

Mugadziri wedata anofanira kugadzirisa Data reVatengi chete zvichienderana nemirairo yakanyorwa yeMutongi, kunze kwekunge zvichidikanwa kuti zviitwe nemutemo weEU kana weNyika Dzenhengo. Mugadziri wedata haafanire kugadzirisa Data reVatengi nekuda kwezvinangwa zvake kana kurizivisa kune vamwe vanhu kunze kwekunge zvichidikanwa kupa Masevhisi kana sezvinodiwa nemutemo.

5.2 Kuvanzika

Mugadziri wedata anofanira kuona kuti vanhu vane mvumo yekugadzirisa data revatengi vane commitvakazvipa ruzivo rwezvakavanzika kana kuti vari pasi pechisungo chakakodzera chemutemo chezvakavanzika. Kuwana Data reVatengi kuchagumira kune avo vashandi, makondirakiti nevagadziri vemabhizinesi vanoda mukana wekupa Masevhisi.

5.3 Matanho ekuchengetedza

Mugadziri wedata anofanira kushandisa nekuchengetedza matanho akakodzera ehunyanzvi uye esangano ekudzivirira Ruzivo rweMutengi kubva pakugadzirisa kusina mvumo kana zvisiri pamutemo uye kubva pakurasikirwa netsaona, kuparadzwa, kukuvara, kushandurwa kana kuburitswa pachena, achifunga nezve:

• mamiriro epamusoro uye mari yekushandisa;
• hunhu, chiyero, mamiriro ezvinhu uye zvinangwa zvekugadzirisa;
• njodzi kukodzero nerusununguko rwevanhu, kunyanya kubva mukuparadzwa netsaona kana zvisiri pamutemo, kurasikirwa, kushandurwa, kuburitswa pachena kusina mvumo, kana kuwanikwa kweData reVatengi rinotumirwa, rakachengetwa kana kugadziriswa neimwe nzira.

Matanho akadaro anofanira kusanganisira, zvirinani, ayo akanyorwa muSchedule 2 (Technical and Organisational Security Measures) kune iyi DPA. Chitupa cheISO 27001 chemugadziri chinopa humbowo hwehurongwa hwekuchengetedza ruzivo rwekutanga. Mugadziri anofanira kuchengetedza chitupa cheISO 27001 kana chakaenzana mukati menguva yese yeDPA iyi.

5.4 Kodzero dzeZvinyorwa zveData

Mugadziri wedhizaini anofanira, achifunga nezvemhando yedhizaini, kubatsira Mutongi nematanho akakodzera ehunyanzvi uye esangano, kana izvi zvichibvira, kuzadzisa chisungo cheMutongi chekupindura zvikumbiro zvekushandisa.cisKodzero dzeVane Data pasi peMutemo Unoshanda weDziviriro yeData (kusanganisira kodzero dzekuwana, kugadzirisa, kudzima, kuganhurira, kutakurwa uye kuramba pasi peZvinyorwa zveGDPR 15–22).

Mugadziri wedata anofanira: (a) kuzivisa Controller nekukurumidza kana Processor agamuchira chikumbiro kubva kuMutengi weData maererano neData reMutengi; (b) kusapindura zvikumbiro zvakadaro kunze kwekunge paine zvakanyorwa mirairo yeMutariri kana sezvinodiwa nemutemo unoshanda; uye (c) kupa Controller rubatsiro rwakakodzera mukupindura zvikumbiro zvakadaro mukati memazuva ekupedzisira anoshanda (mazuva makumi matatu pasi peGDPR Art. 12).

5.5 Rubatsiro pamabasa eMutongi

Mugadziri weprosesa anofanira kubatsira Mutongi mukuona kuti zvinosungirwa pasi peZvinyorwa zveGDPR 32–36 zvinotevedzwa, achifunga nezvemhando yekugadzirisa uye ruzivo rwunowanikwa kuMugadziri weprosesa, kusanganisira maererano ne:

• kuchengetedzeka kwekugadzirisa (Art. 32);
• kuziviswa kweKutyorwa kweData reMunhu kuvakuru vekutarisira uye kutaurirana kune Vane Data Subjects (Arts. 33–34);
• kuongororwa kwemigumisiro yekuchengetedzwa kwedata uye kubvunzana kare (Arts. 35–36).

5.6 Kubviswa kana kudzoserwa kwedata

Kana Chibvumirano Chekutanga chapera kana kupera, kana kana Mutongi akumbira, Mutongi, achabvisa kana kudzorera kuna Mutongi Data rese reVatengi raainaro, uye achabvisa makopi aripo, kunze kwekunge mutemo weEU kana weNyika yeNhengo uchida kuchengetwa kweData reMunhu. Mutongi achasimbisa kupedzwa kwekubviswa kwacho nekunyora mukati memazuva makumi matatu kubva pakatanga kuburitswa.

Zve processor standard purogiramu yekuchengetedza data (yakarongwa muSchedule 1) ichashanda kunze kwekunge Mutongi akumbira kare kuti ribviswe.

5.7 Kuongorora uye kuratidza kutevedzera mitemo

Mugadziri wezvinhu anofanira kupa Controller ruzivo rwese rwakakosha kuratidza kutevedzera zvinotarisirwa zvakanyorwa muDPA iyi, uye anofanira kubvumira nekubatsira muongororo, kusanganisira kuongororwa, kunoitwa neController kana muongorori akarayirwa neController.

Mugadziri anogona kuzadzisa chisungo ichi nekupa:

• kopi yechitupa chayo cheISO 27001 chazvino kana mushumo weSOC 2 Type II (kana wangowana);
• kupedzisa mibvunzo yekuchengetedza yeController (mukati memazuva gumi ebhizinesi mushure mekugamuchira);
• kuongororwa kwakakodzera panzvimbo yacho mushure memazuva makumi matatu ekuzivisa kwakanyorwa kare, nemari yeController, kwete kupfuura kamwe chete pagore (kunze kwekunge paine fungidziro ine musoro yekusatevedzera mitemo).

6. Ziviso yeKutyorwa kweData reMunhu

Processor inofanira kuzivisa Controller pasina kunonoka, uye chero zvodini mukati memaawa makumi mana nemasere ekuziva nezvekutyorwa kwedata remunhu kunokanganisa data revatengi. Chiziviso chakadaro chinofanira kusanganisira, kusvika paripo panguva iyoyo:

• tsananguro yemhando yekutyorwa kwedata remunhu, kusanganisira mapoka nenhamba inofungidzirwa yevanhu vane ruzivo nezvedata iri pamwe nemapoka nenhamba inofungidzirwa yezvinyorwa zvedata remunhu zviri kutaurwa nezvazvo;
• zita uye ruzivo rwekuonana nemukuru wekuchengetedza data kana imwe nzvimbo yekutaurirana nayo inogona kuwanikwa rumwe ruzivo;
• tsananguro yemigumisiro inogona kuitika nekuda kwekutyorwa kwedata remunhu;
• tsananguro yematanho akatorwa kana akarongwa kuti atore kugadzirisa Kutyorwa kweData reMunhu, kusanganisira, pazvinenge zvakakodzera, matanho ekuderedza migumisiro yaro yakaipa.

Kana zvisingaite kupa ruzivo rwese rwuri pamusoro panguva imwe chete, ruzivo urwu runogona kupihwa muzvikamu pasina kunonoka kwakanyanya. Mugadziri wenyaya anofanira kushanda pamwe chete neMutongi uye kutora matanho akakodzera seanogona kudiwa neMutongi kuti abatsire mukuferefeta, kuderedza uye kugadzirisa kutyorwa kwemutemo.

Mapato anobvuma kuti chisungo chiri pasi peGDPR Article 33 chekuzivisa vane masimba ekutarisira (Agencia Española de Protección de Datos — AEPD, kana imwe nyanzvi yakakodzera) mukati memaawa makumi manomwe nemaviri ekuziva nezvekutyorwa kwedata remunhu chiri mumaoko eController semutongi wedata. Kuzivisa kweProcessor kuController pasi peChikamu ichi kunoitirwa kuti Controller azadzise chisungo ichi chemutemo. Kuzivisa kweProcessor hakufanirwe kureva kubvuma mhosva kana mhosva.

7. Mapurosesa madiki

7.1 Mvumo yakajairika

Mutongi anopa mvumo yeProcessor yekushandisa maSub-processors sezvakanyorwa muSchedule 3 (Approved Sub-processors) kuDPA iyi. Processor inofanira kuisa pane zvese zvisungo zvekuchengetedza data zveSub-processor zvakaenzana nezviri muDPA iyi, kunyanya kupa vimbiso yakakwana yekushandisa matanho akakodzera ehunyanzvi uye esangano.

7.2 Shanduko kumaSub-processors

Mugadziri wedhisiki anofanira kuzivisa Mutongi nezve chero shanduko dzinoda kuitwa maererano nekuwedzerwa kana kutsiviwa kwemaSub-processors ne: (a) kugadzirisa runyorwa rweSub-processor rwakaburitswa pa https://xygeni.io/legal/subprocessors ne "Last updated" date rakagadziridzwa; uye (b) kupa chiziviso chakanyorwa kuna Mutongi mazuva gumi (10) shanduko isati yatanga kushanda. Mutongi anogona kuramba shanduko iyi nekuda kwezvikonzero zvine musoro zvekuchengetedza data mukati memazuva manomwe (7) ekuzivisa kwakadaro. Kana Mutongi achiramba uye Mapato asingakwanise kugadzirisa kupikisa, Mutongi anogona kugumisa Chibvumirano Chekutanga pachiziviso chine musoro pasina chirango.

Kana Processor ikashandisa Sub-processor, Processor icharamba iine mutoro wakazara kuna Controller wekuita mabasa eSub-processor iyoyo kusvika padanho iro Sub-processor inokundikana kuzadzisa mabasa ayo ekudzivirira data.

7.3 Zvinodiwa pakuyerera kwepasi kwe sub-processor

Kune imwe neimwe Sub-processor, Processor inofanira:

• ita ongororo yakakodzera usati watanga kushanda neSub-processor;
• kupinda muchibvumirano chakanyorwa chekugadzirisa data chinoisa zvisungo zvekuchengetedza data zvisingadziviriri zvakanyanya sezviri muDPA iyi;
• chengetedza kuti matanho ekuchengetedza eSub-processor akaenzana neaya anodiwa pasi peChikamu 5.3 neSchedule 2;
• zvinosanganisira zvisungo zvekuzivisa kutyorwa kwedata zvinoda kuti Sub-processor izivise Processor mukati memaawa makumi maviri nemana mushure mekunge yaziva nezvekutyorwa kwedata remunhu, kuitira kuti Processor ikwanise kuzadzisa zvisungo zvayo zvekuzivisa kuController kwemaawa makumi mana nemasere.

8. International Transfers

Mugadziri haafanire kutumira Data reVatengi kunyika iri kunze kweEuropean Economic Area (EEA) kunze kwekunge:

• European Commission yatora gwaro rekuticisnyika iyoyo pasi peGDPR Article 45; kana
• dziviriro dzakakodzera dzakaitwa zvichienderana neGDPR Article 46, kusanganisira asi kwete kungogumira pa Standard Zvikamu zvechibvumirano zvakatorwa neEuropean Commission Implementing Decision (EU) 2021/914 ya4 Chikumi 2021 (“SCCs”).

Kana maSCC achidiwa, Processor, kana Controller yakumbira, inofanira kuita maSCC anoshanda neController uye/kana neSub-processor yakakodzera. Module inoshanda yemaSCC inofanira kuva Module Two (Controller kuenda kuProcessor) yekutamiswa kubva kuController kuenda kuProcessor, uye Module Three (Processor kuenda kuSub-processor) yekutamiswa mberi neProcessor kuenda kuSub-processors.

Simba rine hunyanzvi hwekutarisira zvinangwa zveSCCs iSpanish Data Protection Agency (Agencia Española de Protección de Datos — AEPD), kunze kwekunge zvabvumiranwa neimwe nzira mukunyora.

Mugadziri wedata anofanira kuchengetedza uye kuita kuti riwanikwe kuController, kana akumbira, rekodhi yemazuva ano yekutamiswa kwedata revatengi pasi rose uye nzira yekutumira data yemumwe nemumwe.

9. Kuongororwa Kwemigumisiro Yekuchengetedzwa Kwedata

Kana chiitiko chekugadzirisa chingangokonzera njodzi huru kukodzero nerusununguko rwevanhu venyama uye Mutongi anofanirwa kuita Kuongororwa Kwemhedzisiro Yekuchengetedzwa Kwedata (DPIA) pasi peGDPR Article 35, Mutongi anofanira kupa Mutongi rubatsiro rwakakodzera neruzivo sezvinodiwa kuti Mutongi akwanise kuita DPIA. Mutongi anofanira kupindura zvikumbiro zvine musoro zveMutongi zvine chekuita neDPIA mukati memazuva gumi nemashanu ebhizinesi.

10. Zvinyorwa zveMabasa Ekugadzirisa

Mugadziri wedhisiki anofanira kuchengetedza, pakukumbira kweMutongi, rekodhi yemabasa ekugadzirisa akaitwa panzvimbo yeMutongi zvichienderana neGDPR Article 30(2), kusanganisira: zita uye ruzivo rwekuonana kweMugadziri wedhisiki uye chero maSub-processors; mapoka ekugadzirisa akaitwa panzvimbo yeMutongi; kutumirwa kweData reMunhu kune imwe nyika; uye tsananguro yakajairika yematanho ekuchengetedza ehunyanzvi uye esangano.

11. Mhosva

Mutoro weBato rega rega kune rimwe pasi kana kuti maererano neDPA iyi uchave pasi pemiganhu uye zvisaririra zvakanyorwa muChibvumirano Chikuru. Kana Munhu Ane Data Akakuvara nekuda kwekugadzirisa kunotyora Mutemo Unoshanda weDziviriro yeData, Bato rega rega richave nemhosva yekukuvara kwakakonzerwa nekushanda kwaro kunotyora GDPR zvichienderana neZvinyorwa zveGDPR 82–83. Hapana chiri muchikamu chino chinoganhurira mutoro weBato rega rega kune Munhu Ane Data pasi pemutemo unoshanda.

12. Kupera uye Kubviswa

DPA iyi inotanga kushanda pazuva rechibvumirano chikuru (kana zuva rekushanda kweDPA iyi kana gare gare) uye icharamba ichishanda kwenguva yese yechibvumirano chikuru. Kugumiswa kwechibvumirano chikuru chero chikonzero chipi zvacho kuchagumisa DPA iyi otomatiki.

Mushure mekugumiswa, zvinosungirwa neProcessor pasi peChikamu 5.6 (kudzimwa kana kudzoserwa kwedata) zvicharamba zviripo uye Processor achapedzisa kudzima kana kudzoserwa kweData reVatengi mukati memazuva makumi matatu ekugumiswa. Zvikamu zvine chekuita nekuchengetedzwa kweruzivo, mutoro, mutemo unotungamira uye kuongororwa kwedata zvicharamba zviripo.

13. Mutemo Unodzora uye Masimba

DPA iyi ichatongwa uye ichatsanangurwa zvinoenderana nemitemo yeSpain. Mapato anozviisa pasi pesimba rematare eMadrid risiri rega kuti gakava ripi zvaro rigadziriswe kubva kana kuti rine chekuita neDPA iyi rigadziriswe. Kusvika padanho rekuti chero chikamu cheDPA iyi chinopesana neSCC, maSCC ndiwo achatonga.

14. Kusiyana

Chibvumirano Chese: Iyi DPA, pamwe chete neSchedules yayo nePrincipal Agreement, inoumba chibvumirano chose pakati peMapato maererano nenyaya iyi uye inotsiva zvibvumirano zvese zvekare, kunzwisisana kana zvimiririro zvine chekuita nekugadzirisa data.

Amendments: DPA iyi inogona kugadziriswa chete nechibvumirano chakanyorwa chakasainwa nevamiriri vane mvumo veMapato ese ari maviri.

Severability: Kana chero chikamu cheDPA ichi chikaonekwa sechisina basa kana kuti chisingashandiswe, zvimwe zvikamu zvicharamba zvichishanda zvizere.

Kutanga: Kana paine kusawirirana pakati peDPA iyi neSchedules, muviri weDPA ndiwo uchatonga kunze kwekunge Schedule yataura zvakasiyana. Kana paine kusawirirana pakati peDPA iyi neSCCs (kana zvichibvira), SCCs dzichatonga.

RONGWA 1 — Ruzivo rweKugadzirisa

1. Nyaya Yenyaya

Nyaya yenyaya yekugadzirisa iyi inyaya yakapihwa naXygeni ye application security posture management, software supply chain security ongororo, kuona njodzi, CI/CD kutarisa kuchengetedzeka, uye mabasa ane chekuita nazvo sezvakatsanangurwa muChibvumirano Chikuru.

2. Maitiro Ekugadzirisa

Kuunganidza, kuronga, kuronga, kuchengetedza, kuongorora, kutora, kushandisa, kuburitsa pachena nekutumira, kugadzirisa kana kusanganisa, kurambidza, kudzima kana kuparadzwa kweData reVatengi.

3. Chinangwa Chekugadzirisa

Kugadziriswa kweData reVatengi kunoitwa nechinangwa chekupa Mabasa kuMutongi, kusanganisira: kuona nekushuma njodzi dzekuchengetedzwa; kuongorora njodzi dzesoftware supply chain; CI/CD pipeline security kutarisa; kuona zvinhu zvisina kujairika; uye rutsigiro rwevatengi.

4. Nguva Yekugadzirisa

Mugadziri wedhisiki anofanira kugadzirisa Data reMutengi kwenguva yese yeChibvumirano Chikuru. Kana yapera, Mugadziri wedhisiki anofanira kuchengetedza Data reMutengi kwemwedzi mitatu mushure mezuva rekupedzisira rekunyorera risati radzimwa, kunze kwekunge Mutongi akumbira kubviswa kwekutanga. Data reakaundi yekuedza rinochengetwa kwemwedzi mumwe chete mushure mekupera kwekuyedzwa.

5. Mhando dzeRuzivo Rwemunhu

6. Mapoka eVanhu Vane Data

Vanhu vane Data vanosanganisira: vashandi, makondirakiti, nevamwe vashandisi vane mvumo veController vanowana Masevhisi; vanopa rubatsiro (vagadziri, maakaundi ebot, vamiririri vekuvaka) kumarepository uye pipelineinotariswa neMasevhisi; uye vamiririri nevanhu vekutaurirana neMutongi.

7. Ruzivo rweChikamu Chakakosha

Masevhisi haana kugadzirwa kuti agadzirise ruzivo rwemunhu rwechikamu chakakosha sezvakatsanangurwa muGDPR Article 9. Mutongi anopa gwaro rekuti haazotumire ruzivo rwemunhu rwechikamu chakakosha kuSevhisi pasina chibvumirano chakanyorwa kare neXygeni uye kushandiswa kwedzimwe dziviriro dzakakodzera.

RONGWA 2 — Matanho eKuchengetedza Kwehunyanzvi uye Kwesangano

Xygeni inoshandisa matanho anotevera ehunyanzvi uye ehurongwa kuchengetedza Ruzivo rweVatengi, zvichienderana nehurongwa hwekuchengetedza ruzivo hwakapihwa neXygeni hweISO 27001:

Access Control

• Kudzora mukana webasa (RBAC) kunoshandiswa mumasisitimu ese anogadzira Data reVatengi.
• Kusimbiswa kwezvinhu zvakawanda (MFA) kunodiwa kune vese vashandi veXygeni vanoshandisa masisitimu ekugadzira.
• Nheyo yekodzero shoma inoshandiswa kumaakaundi ese evashandisi; kodzero dzekuwana dzinoongororwa kota yega yega.
• Kusimbiswa kweSSH kwakavakirwa pakiyi yekupinda muserver yekugadzira; kusimbiswa kwepassword kwakadzimwa.

Data Encryption

• Ruzivo rweVatengi rwakavanzika parunofambiswa uchishandisa TLS 1.2 kana kupfuura.
• Ruzivo rweVatengi runovharwa panguva yakare uchishandisa AES-256 kana yakaenzana nayo.
• Makiyi e encryption anodzorwa kuburikidza neAWS Key Management Service (KMS).

Network Security

• Masisitimu ekugadzira ari mukati meAWS Virtual Private Cloud (VPC) ane network segmentation.
• Web Application Firewall (WAF) yakashandiswa pakugadzirisa matambudziko everuzhinji.
• Masisitimu ekuona nekudzivirira kupinda kwechinhu aripo.
• Kuongororwa nguva dzose kwenjodzi uye kuyedzwa kwekupinda kwezvivakwa uye mashandisirwo ezvikamu.

Kuchengeteka Kwepanyama

• Data reVatengi rinochengetwa munzvimbo dzedata dzeAWS dzine zvitupa zveSOC 2 Type II neISO 27001.
• Kusvika kwenzvimbo dzedata chete kunongogumira kune vashandi vane mvumo veAWS vane biometric controls.

Kuwanikwa uye Kusimba

• Kuchengetedza data rese revatengi otomatiki zuva nezuva, kunochengetwa kwemazuva manomwe.
• Kuvimbika kwekuchengetedza kunosimbiswa nguva nenguva.
• Disastnzira dzekudzoreredza hutachiona dzakanyorwa uye dzakaedzwa gore rega rega.

Chiitiko Management

• Hurongwa hwekuchengetedza hunoramba huchiitwa uye huchiedzwa gore rega rega.
• Zviitiko zvekuchengetedza zvinoongororwa uye zvakanyorwa; zviziviso zvinoongororwa nechikamu chekuchengetedza.
• Maitiro ekuzivisa nezveKutyorwa kweData reMunhu aripo kuti azadzise chisungo chekuzivisa chinoitwa maawa makumi mana nemasere kuMutongi.

vashandi

• Vashandi vese veXygeni vane mukana wekuwana Data reVatengi vanosungirwa nemabasa ekuchengetedza zvakavanzika.
• Kudzidziswa kwekuchengetedza kunoitirwa vashandi vese gore rega rega.
• Kuongororwa kwemamiriro ezvinhu kwakaitwa kune vashandi vane mukana wekushandisa masisitimu ekugadzira, kusvika pamwero unobvumidzwa nemutemo unoshanda.

Chechitatu-Bato Management

• Ma-sub-processor anoongororwa kuti anotevedzera mitemo yekuchengetedzwa kwedata vasati vatanga kushanda.
• Zvibvumirano zvekugadzirisa data zviri kuitwa nemaSub-processors ese.

kutaura kuti ichokwadi

• Xygeni ine chitupa cheISO 27001 (system yekutarisira kuchengetedzwa kwemashoko).
• Xygeni iri kutsvaga chitupa cheSOC 2 Type II; chitupa chichapihwa kuController kana chapera.