Huawei Cloud processes the following types of data:

● Personal data: various types of information recorded electronically or otherwise relating to an identified or identifiable natural person, excluding information that has been anonymized. When you are interacting with Huawei Cloud, Huawei Cloud collects personal data that is sometimes required, for example, to provide you with certain services. We collect your personal data in the following scenarios: When you use a Huawei ID, we collect your username, mobile number, email address, and account information; when you use the address management service, we collect your recipient name, detailed address, postal code, and mobile number. For more scenarios, see the Privacy Statement.

Huawei Cloud respects and protects your personal data in accordance with Huawei Cloud Privacy Statement and other applicable laws. Huawei Cloud collects, stores, and uses your personal data in compliance with the data minimization principle, and takes comprehensive measures to secure your personal data.

● Content data: data stored or processed during the use of Huawei Cloud services, including but not limited to documents, software, images, and audio and video files. You have the control over your content data. You are responsible for the authenticity, accuracy, legality, and security of your content data. Huawei Cloud provides a wide range of security services for you to improve security and reduce data security risks.

Huawei Cloud has many regions and AZs deployed around the world and offers high-speed global network connections and localized services. You can select a region to purchase and deploy services as needed. The region you select is where your content data is stored. We will never move your content data across regions without your express authorization. For example, if your services are in a city around Singapore and you want to store your content data only in Singapore, you can select the Singapore region to purchase and deploy services.

For more information about Huawei Cloud regions and AZs, see the global infrastructure distribution on Huawei Cloud website.

Content data: You can decide where your content data is stored. Huawei Cloud will not transfer your content data to other regions unless required by applicable laws or explicitly authorized by you. If you need to transfer your content data across borders and need assistance from Huawei Cloud, you can contact us and authorize Huawei Cloud to transfer your content data. We will then provide necessary assistance in compliance with applicable laws and regulations.

As a cloud infrastructure and service provider, we understand your concerns about data security. We always comply with local laws and regulations on data security. Without your explicit consent, we will never use, or even access, your non-public content data.

Huawei Cloud has created a sound, trustworthy, sustainable data security governance system based on the shared responsibility model, in compliance with laws, regulations, and obligations specified in "Your Content" and "Your Security" in Huawei Cloud Customer Agreement, and by referring to international and industry data security standards and best practices. The system includes organization responsibilities, regulatory requirements, process guidance, technical tools, and measurement and verification of security controls. We will take appropriate management, physical, and technical measures to ensure the security of our cloud infrastructure and cloud services and provide systematic and effective security and compliance capabilities for your content data on the cloud.

However, you also need to understand that you have control over your content data on the cloud, and Huawei Cloud is only the trustee for it. Building a cloud data security system depends on the security capabilities provided by the cloud service provider and appropriate security measures you take in the cloud. You shall be responsible for the legitimacy, security, accuracy, integrity, and reliability of your content data, including but not limited to developing and implementing appropriate security regulations (such as user management and access control), deploying appropriate cloud security services, implementing appropriate security configurations, and installing vulnerability patches in a timely manner. You are responsible for obtaining and maintaining any notice, consent, or authorization related to your content. We will not assume any obligations or liabilities related to your content, unless otherwise specified in laws.

You can use cloud security services and features, such as Data Security Center (DSC), Data Encryption Workshop (DEW) , Database Security Service (DBSS), Cloud Bastion Host (CBH) and Cloud Certificate Manager (CCM) to help you manage data security. To improve security and compliance, you can count on our security services and solutions, such as Managed Detection Response(MDR) and the DJCP solution.