Transparent Visibility in Data Processing

Huawei Cloud is dedicated to data neutrality. Customer data is owned by the customer, used by the customer, and exists to create value for the customer. Huawei Cloud will never access your data without explicit authorization, and when authorized, Huawei Cloud will only access your data in a fully transparent manner.

Huawei Cloud Services

Data center security

Infrastructure security is a core component of Huawei Cloud's multi-dimensional, full-stack cloud security system. Our data centers are located in geographically secure locations, and we take appropriate access control, monitoring, and service continuity assurance measures to improve the security and reliability of Huawei Cloud infrastructure.

Data storage

Huawei Cloud provides services for customers by region. A region is where your data is physically stored. Huawei Cloud will never move your data across regions without your authorization. When using cloud services, customers are advised to select regions closer to their clients and take care to act in accordance with all local laws and regulations to ensure that their data is stored in these regions. For regional services, you can select the region where your service is deployed and where your data is stored when you make a purchase on the Huawei Cloud management console.

Data transmission

Huawei Cloud uses VPNs to establish secure and encrypted communications tunnels that comply with industry standards, ensuring end-to-end confidentiality during data transmission. Huawei Cloud supports REST- and Highway-based data transmission, the latest version of the transport layer security protocol, and website identity authentication using X.509 certificates. You can choose multiple transmission encryption solutions, such as Cloud Certificate Manager (CCM), Direct Connect, and Data Express Service (DES), to meet encryption requirements for application, transport, and physical layers.

Contractual commitments

Huawei Cloud has specified its responsibilities and obligations for your data security in related contracts and agreements. Huawei Cloud is responsible for providing you with secure infrastructure and cloud services and for developing and implementing appropriate security policies and measures to help you prevent data from being leaked, damaged, or accessed without proper authorization.

Account data

Huawei Cloud will process your requests for data access, correction, deletion, or portability within the legal time limit and provide clear feedback.

Content data

In some special scenarios, you may need to apply for support services from Huawei Cloud. Huawei Cloud may need to access your cloud environment to help you solve problems. To prevent unauthorized personnel from accessing your cloud data, you can create a service ticket to request Huawei Cloud O&M engineers.

Contractual commitments

Account data

Huawei Cloud will process your requests for data access, correction, deletion, or portability within the legal time limit and provide clear feedback.

Content data

Laws and regulations

Huawei Cloud complies with applicable data security laws and regulations of the countries and regions where we operate, and we actively participate in the formulation of data security standards internationally to ensure that Huawei Cloud data processing activities comply with industry best practices.

Legal obligations

Huawei Cloud will not proactively disclose your data to law enforcement agencies unless we have obtained your explicit authorization or need to do so in accordance with applicable laws and regulations. When Huawei Cloud receives a data request from a law enforcement agency, Huawei Cloud will advise the law enforcement agency to request data from you. If a law enforcement agency requests your data from Huawei Cloud, Huawei Cloud will thoroughly validate such requests in accordance with applicable laws, regulations, and judicial procedures, and notify you of such requests immediately, unless the notification is prohibited by the law enforcement agency.

Laws and regulations

Legal obligations

Requirements for Partners

Huawei Cloud has established a comprehensive supplier management system. Before cooperating with a supplier, Huawei Cloud will conduct due diligence on them and check their business licenses and qualifications required. Huawei Cloud will sign a non-disclosure agreement with the supplier, and the supplier is required to sign a non-disclosure agreement with its employees. Terms and clauses on information security responsibilities of suppliers will be specified in the contracts signed. These terms and clauses shall specify suppliers' responsibilities for information security and requirements for security of physical, cyber, application, and terminals in offshore outsourcing sites. When signing a contract with an outside supplier, those terms and clauses are supplementary to the basic contractual clauses. Disciplinary measures will be stated for any violations against those terms and clauses.

Huawei Cloud periodically invites independent third parties to assess Huawei Cloud's security compliance with industry standards, such as SOC and PCI-DSS certification, to validate Huawei Cloud security controls, including how Huawei Cloud effectively protects customer data on the cloud from unauthorized access. You can download cyber security and privacy protection certificates that Huawei Cloud has earned, along with the audit reports. They show Huawei Cloud's efforts in cloud data security and how well Huawei Cloud protects your data on the cloud.