Difference between revisions of "Tencent Cloud"
Shawndouglas (talk | contribs) m (→Provider research: Tweak) |
Shawndouglas (talk | contribs) (Updated for 2023.) |
||
| Line 17: | Line 17: | ||
| locations = | | locations = | ||
| area_served = Worldwide | | area_served = Worldwide | ||
| key_people = | | key_people = Dowson Tong (CEO) | ||
| industry = Cloud computing, Web services | | industry = Cloud computing, Web services | ||
| products = [[Infrastructure as a service|IaaS]], [[Platform as a service|PaaS]], [[Database as a service|DBaaS]], [[Desktop virtualization#Desktop as a service|DaaS]] | | products = [[Infrastructure as a service|IaaS]], [[Platform as a service|PaaS]], [[Database as a service|DBaaS]], [[Desktop virtualization#Desktop as a service|DaaS]] | ||
| services = | | services = | ||
| revenue = $ | | revenue = $21.4 billion (Q1 2023)<ref name="TencentQ123">{{cite web |url=https://www.cnbc.com/2023/05/17/tencent-q1-earnings-report-2023-.html |title=Tencent posts fastest jump in quarterly revenue in more than a year after China reopens |author=Browne, R. |work=CNBC |date=17 May 2023 |accessdate=04 August 2023}}</ref> | ||
| operating_income = | | operating_income = | ||
| net_income = | | net_income = | ||
| Line 37: | Line 37: | ||
}} | }} | ||
'''Tencent Cloud''' is a collection of public, private, hybrid, and multicloud [[cloud computing]] services offered by Tencent, a Chinese multinational technology conglomerate. Tencent Cloud deploys to an unknown number of data centers in | '''Tencent Cloud''' is a collection of public, private, hybrid, and multicloud [[cloud computing]] services offered by Tencent, a Chinese multinational technology conglomerate. Tencent Cloud deploys to an unknown number of data centers in 26 regions and 70 availability zones around the world.<ref name="TencentGlobalInfra">{{cite web |url=https://www.tencentcloud.com/global-infrastructure |title=Tencent Cloud Global Infrastructure |publisher=Tencent |accessdate=04 August 2023}}</ref> More than 70 different products and services are associated with Tencent Cloud, representing elastic computing, networking, content delivery, data storage, database management, security management, enterprise management, [[data analysis]], container and middleware management, developer support, [[blockchain]] management, media management, and [[artificial intelligence]].<ref name="TencentGlobalInfra" /> | ||
| Line 46: | Line 46: | ||
1. '''What experience do you have working with laboratory customers in our specific industry?''' | 1. '''What experience do you have working with laboratory customers in our specific industry?''' | ||
Tencent Cloud has been implemented in the [[Laboratory|laboratories]] of the National Institute of Biological Sciences, Beijing<ref name="LauLeveraging20">{{cite web |url=http://www.unpog.org/file/download.asp?sn=345 |format=PDF |title=“Leveraging ICTs and Digital Government for Innovative Solutions to Address the COVID-19 Pandemic Responses in Africa |author=Lau, S.Y. |publisher=United Nations |date=2020 |accessdate= | Tencent Cloud has been implemented in the [[Laboratory|laboratories]] of the National Institute of Biological Sciences, Beijing<ref name="LauLeveraging20">{{cite web |url=http://www.unpog.org/file/download.asp?sn=345 |format=PDF |title=“Leveraging ICTs and Digital Government for Innovative Solutions to Address the COVID-19 Pandemic Responses in Africa |author=Lau, S.Y. |publisher=United Nations |date=2020 |accessdate=04 August 2023}}</ref>, Shenzhen Technology University<ref name="LeahSZTU19">{{cite web |url=https://english.sztu.edu.cn/info/1004/1186.htm |title=SZTU, Tencent join hands in establishing college and laboratories |author=Leah; Brian |publisher=Shenzhen Technology University |date=17 May 2019 |accessdate=04 August 2023}}</ref>, Tsinghua University Institute of Biomedicine<ref name="FeifeiTsinghua20">{{cite web |url=https://www.chinadaily.com.cn/a/202009/28/WS5f71da3fa31024ad0ba7c6d8.html |title=Tsinghua University, Tencent sign in-depth cooperation agreement |author=Feifei, F. |work=ChinaDaily.com |date=28 September 2020 |accessdate=04 August 2023}}</ref>, and ZhongShan University.<ref name="LauLeveraging20" /> It's not clear if any laboratory informatics vendors have turned to Tencent Cloud to host their SaaS solutions. A discussion with a Tencent Cloud representative is likely to be able to supply more examples of laboratories and laboratory informatics developers that use or have used Tencent Cloud. | ||
2. '''Can your solution readily integrate with our other systems and business processes, making it easier for our end users to perform their tasks?''' | 2. '''Can your solution readily integrate with our other systems and business processes, making it easier for our end users to perform their tasks?''' | ||
It will ultimately be up to your organization to get an answer from Tencent tailored to your systems and business processes. However, this much can be said about Tencent Cloud integrations. Tencent Cloud doesn't discuss integration approaches extensively, but it does make reference to its API, which "can greatly improve efficiency in performing frequently called functions, and different APIs can be combined to achieve more advanced features, easier automation and remote call as well as higher compatibility." They add that "Tencent Cloud provides an [software development kit] compatible with multiple languages that uniformly encapsulates the APIs of all of its products, allowing you to integrate Tencent Cloud services into your applications, databases or automation scripts with greater efficiency and convenience."<ref name="TencentCloudAPI">{{cite web |url=https:// | It will ultimately be up to your organization to get an answer from Tencent tailored to your systems and business processes. However, this much can be said about Tencent Cloud integrations. Tencent Cloud doesn't discuss integration approaches extensively, but it does make reference to its API, which "can greatly improve efficiency in performing frequently called functions, and different APIs can be combined to achieve more advanced features, easier automation and remote call as well as higher compatibility." They add that "Tencent Cloud provides an [software development kit] compatible with multiple languages that uniformly encapsulates the APIs of all of its products, allowing you to integrate Tencent Cloud services into your applications, databases or automation scripts with greater efficiency and convenience."<ref name="TencentCloudAPI">{{cite web |url=https://www.tencentcloud.com/products/api |title=TencentCloud API |publisher=Tencent |accessdate=04 August 2023}}</ref> | ||
3. '''What is the average total historical downtime for the service(s) we're interested in?''' | 3. '''What is the average total historical downtime for the service(s) we're interested in?''' | ||
Little public information is made available about historic outages and downtime. You'll largely have to ask this of Tencent and see what response they give you. Tencent has demonstrated a desire to maintain a high level availability, stating "[t]he Service Availability Across Availability Zones in A Single Region of the Service provided by Tencent Cloud will be no less than 99.995%."<ref name="TencentCVMSer20">{{cite web |url=https:// | Little public information is made available about historic outages and downtime. You'll largely have to ask this of Tencent and see what response they give you. Tencent has demonstrated a desire to maintain a high level availability, stating "[t]he Service Availability Across Availability Zones in A Single Region of the Service provided by Tencent Cloud will be no less than 99.995%."<ref name="TencentCVMSer20">{{cite web |url=https://www.tencentcloud.com/document/product/301/30393 |title=CVM Service Level Agreement |publisher=Tencent |date=01 November 2020 |accessdate=04 August 2023}}</ref> You may wish to consult a Tencent Cloud representative on the historic downtime of its solutions. That said, data losses have been reported in 2018<ref name="QianqianMEdia18">{{cite web |url=https://www.yicaiglobal.com/news/media-firm-demands-usd16-million-from-tencent-over-cloud-data-loss |title=Media Firm Demands USD1.6 Million From Tencent Over Cloud Data Loss |author=Qianqian, D. |work=Yicai Global |date=07 August 2018 |accessdate=04 August 2023}}</ref>, though no downtime or outage reports could be found. | ||
4. '''Do we receive comprehensive downtime support in the case of downtime?''' | 4. '''Do we receive comprehensive downtime support in the case of downtime?''' | ||
Tencent Cloud does not make this answer clear. However, the answer is likely tied to what [https:// | Tencent Cloud does not make this answer clear. However, the answer is likely tied to what [https://www.tencentcloud.com/render/support-plan after-sales support plan] you choose. Confirm with Tencent Cloud what downtime support they provide based on the services your organization are interested in. | ||
5. '''Where are your servers located, and how is data securely transferred to and from those servers?''' | 5. '''Where are your servers located, and how is data securely transferred to and from those servers?''' | ||
Tencent Cloud has 61 availability zones spread across 26 regions made up of China, the United States, South America, Europe, Asia Pacific and other areas. Tencent Cloud uses its Content Delivery Network to "store your content based on caching policies. When a user makes a content request, it will be routed to the node closest to the user, reducing access delay and improving availability."<ref name="TencentCDNDoc">{{cite web |url=https:// | Tencent Cloud has 61 availability zones spread across 26 regions made up of China, the United States, South America, Europe, Asia Pacific and other areas. Tencent Cloud uses its Content Delivery Network to "store your content based on caching policies. When a user makes a content request, it will be routed to the node closest to the user, reducing access delay and improving availability."<ref name="TencentCDNDoc">{{cite web |url=https://www.tencentcloud.com/document/product/228/2939 |title=Product Overview |work=Tencent Cloud Documentation - Content Delivery Network |publisher=Tencent |date=15 November 2021 |accessdate=04 August 2023}}</ref> As for data transfer, Tencent Cloud has tools like Data Transfer Service to "securely and easily migrate your database onto the cloud."<ref name="TencentDataTrans">{{cite web |url=https://www.tencentcloud.com/products/dts |title=Data Transmission Service |publisher=Tencent |accessdate=04 August 2023}}</ref> As for the security of data in transit across servers, Tencent Cloud says little on their website. You'll have to discuss security for data in transit with a representative. | ||
6. '''Who will have access to our data (including subcontractors), and what credentials, certifications, and compliance training do they have?''' | 6. '''Who will have access to our data (including subcontractors), and what credentials, certifications, and compliance training do they have?''' | ||
In its security whitepaper, Tencent addresses data management personnel and their training in the context of physical security in a few ways<ref name="TencentCloud19">{{cite web |url=https://main.qcloudimg.com/raw/ea77661307adc3825990e159d851d406.pdf |format=PDF |title=Tencent Cloud Security White Paper |publisher=Tencent |date=June 2019 |accessdate= | In its security whitepaper, Tencent addresses data management personnel and their training in the context of physical security in a few ways<ref name="TencentCloud19">{{cite web |url=https://main.qcloudimg.com/raw/ea77661307adc3825990e159d851d406.pdf |format=PDF |title=Tencent Cloud Security White Paper |publisher=Tencent |date=June 2019 |accessdate=04 August 2023}}</ref> | ||
: | : | ||
| Line 83: | Line 83: | ||
7. '''Will our sensitive and regulated data be stored on a machine dedicated to complying with the necessary regulations?''' | 7. '''Will our sensitive and regulated data be stored on a machine dedicated to complying with the necessary regulations?''' | ||
Not all [https:// | Not all [https://www.tencentcloud.com/global-infrastructure?lang=en Tencent Cloud machines] have the same [https://www.tencentcloud.com/services/compliance controls] on them; it will depend on the region, product, and compliance requirements of your lab. That said, verify with a representative that the machine your data will land on meets all the necessary regulations affecting your data. | ||
8. '''How segregated is our cloud data from another customer's, i.e., will lapses of security of another customer's cloud affect our cloud? (It typically won't, but asking the question will hopefully prompt the provider to better explain how your data is segregated.)''' | 8. '''How segregated is our cloud data from another customer's, i.e., will lapses of security of another customer's cloud affect our cloud? (It typically won't, but asking the question will hopefully prompt the provider to better explain how your data is segregated.)''' | ||
Tencent appears use standard virtual machines, hypervisors, and network isolation rules for logical separation.<ref name="TencentCloud19" /> Although it's not 100 percent clear, it appears Tencent Cloud may also has bare metal (physical separation) options in the form of Cloud Physical Machines, "an on-demand physical server rental service provided on a pay-by-usage basis, designed to offer high-performance, securely isolated physical clusters dedicated to cloud."<ref name="TencentBriefCPM">{{cite web |url=https:// | Tencent appears use standard virtual machines, hypervisors, and network isolation rules for logical separation.<ref name="TencentCloud19" /> Although it's not 100 percent clear, it appears Tencent Cloud may also has bare metal (physical separation) options in the form of Cloud Physical Machines, "an on-demand physical server rental service provided on a pay-by-usage basis, designed to offer high-performance, securely isolated physical clusters dedicated to cloud."<ref name="TencentBriefCPM">{{cite web |url=https://www.tencentcloud.com/document/api/386/7031 |title=Brief |work=Tencent Documentation |publisher=Tencent |date=09 May 2017 |accessdate=04 August 2023}}</ref> For further information, discuss the topic with a Tencent Cloud representative. | ||
| Line 96: | Line 96: | ||
* [https://main.qcloudimg.com/raw/ea77661307adc3825990e159d851d406.pdf Cloud security whitepaper] | * [https://main.qcloudimg.com/raw/ea77661307adc3825990e159d851d406.pdf Cloud security whitepaper] | ||
* [https:// | * [https://www.tencentcloud.com/document/product Documentation for security products] | ||
Some security-related documents, like the SOC 2 report, may not be publicly available, requiring direct discussion with a Tencent Cloud representative to obtain them. | Some security-related documents, like the SOC 2 report, may not be publicly available, requiring direct discussion with a Tencent Cloud representative to obtain them. | ||
| Line 103: | Line 103: | ||
10. '''How do you test your platform's security?''' | 10. '''How do you test your platform's security?''' | ||
The Tencent website and documentation doesn't appear to even mention penetration testing or red team exercises. It makes reference to its [https:// | The Tencent website and documentation doesn't appear to even mention penetration testing or red team exercises. It makes reference to its [https://www.tencentcloud.com/products/soc Security Operations Center] for customers, but it doesn't appear to talk about its own internal testing. A conversation with a Tencent representative will be necessary to learn more. | ||
11. '''What are your policies for security audits, intrusion detection, and intrusion reporting?''' | 11. '''What are your policies for security audits, intrusion detection, and intrusion reporting?''' | ||
''Audits'': Tencent gives several tools for customers to test the security of their own accounts, including [https:// | ''Audits'': Tencent gives several tools for customers to test the security of their own accounts, including [https://www.tencentcloud.com/products/cloudaudit CloudAudit]. As for its own security audits, Tencent is audited by the SOC<ref name="TenCentSOC21">{{cite web |url=https://intl.cloud.tencent.com/document/product/363/11543 |title=SOC Audit |publisher=Tencent |date=19 March 2021 |accessdate=04 August 2023}}</ref>, though it's not clear at what frequency. A discussion of Tencent's internal security audits will be necessary, along with requests for their SOC reports. | ||
''Intrusion detection and reporting'': Tencent Cloud provides a tool called Cloud Workload Protection, which "leverages the massive amount of threat data accumulated by Tencent Security and uses machine learning algorithms to provide security services such as intrusion detection and vulnerability alerts.<ref name="TencentProduct20">{{cite web |url=https:// | ''Intrusion detection and reporting'': Tencent Cloud provides a tool called Cloud Workload Protection, which "leverages the massive amount of threat data accumulated by Tencent Security and uses machine learning algorithms to provide security services such as intrusion detection and vulnerability alerts.<ref name="TencentProduct20">{{cite web |url=https://www.tencentcloud.com/document/product/296/2221 |title=Product Introduction |work=Tencent Cloud Documentation - Cloud Workload Protection |publisher=Tencent |date=05 September 2022 |accessdate=04 August 2023}}</ref> However, it's not clear if Tencent uses the same product internally for its own intrusion detection and alerts. This will be a question for a representative. | ||
12. '''What data logging information is kept and acted upon in relation to our data?''' | 12. '''What data logging information is kept and acted upon in relation to our data?''' | ||
The company says that "Tencent Cloud keeps detailed logs of all operations in both internal and external management systems for effective risk traceability."<ref name="TencentNotes21">{{cite web |url=https:// | The company says that "Tencent Cloud keeps detailed logs of all operations in both internal and external management systems for effective risk traceability."<ref name="TencentNotes21">{{cite web |url=https://www.tencentcloud.com/document/product/237/7478 |title=Notes on Information Security |work=Tencent Cloud Documentation - TencentDB for MariaDB |publisher=Tencent |date=09 March 2021 |accessdate=04 August 2023}}</ref> However, it gives no further details. A discussion with a Tencent representative will be required to learn more about this topic. | ||
13. '''How thorough are those logs and can we audit them on-demand?''' | 13. '''How thorough are those logs and can we audit them on-demand?''' | ||
While information is provided about customers viewing their own logs via solutions such as [https:// | While information is provided about customers viewing their own logs via solutions such as [https://www.tencentcloud.com/products/cls Cloud Log Service], no information appears to be provided about how customers can view internal logs collected by Tencent on their own infrastructure. You'll have to discuss this with a Tencent representative. | ||
14. '''For HIPAA-eligible data (e-PHI) we may have, will you sign a business associate agreement?''' | 14. '''For HIPAA-eligible data (e-PHI) we may have, will you sign a business associate agreement?''' | ||
Tencent states that they release "self-assessment reports for HIPAA compliance, which explain its ability to protect users' personal information and the effectiveness of the control measures taken."<ref name="TencentHIPAA20">{{cite web |url=https://intl.cloud.tencent.com/document/product/363/34541?lang=en |title=HIPAA |work=Tencent Cloud Documentation - Compliance |publisher=Tencent |date=19 February 2020 |accessdate= | Tencent states that they release "self-assessment reports for HIPAA compliance, which explain its ability to protect users' personal information and the effectiveness of the control measures taken."<ref name="TencentHIPAA20">{{cite web |url=https://intl.cloud.tencent.com/document/product/363/34541?lang=en |title=HIPAA |work=Tencent Cloud Documentation - Compliance |publisher=Tencent |date=19 February 2020 |accessdate=04 August 2023}}</ref> However, they make no mention of a business associate agreement in their documentation. You'll have to discuss this topic with a representative. | ||
| Line 140: | Line 140: | ||
17. '''Can we use your interface to extract our data when we want, and in what format will it be?''' | 17. '''Can we use your interface to extract our data when we want, and in what format will it be?''' | ||
Tencent discusses data extraction in in the context of material stored in your Cloud Object Storage, where "you can extract data from individual files stored in buckets using the standard SQL templates we provide or by specifying statements that comply with syntax rules."<ref name="TencentDataExt20">{{cite web |url=https:// | Tencent discusses data extraction in in the context of material stored in your Cloud Object Storage, where "you can extract data from individual files stored in buckets using the standard SQL templates we provide or by specifying statements that comply with syntax rules."<ref name="TencentDataExt20">{{cite web |url=https://www.tencentcloud.com/document/product/436/32538 |title=Data Extraction |work=Tencent Cloud Documentation - Cloud Object Storage |publisher=Tencent |date=28 December 2022 |accessdate=04 August 2023}}</ref> They also make reference to data extraction in some of its other products. Little is said about the format the data will be in, however. Discuss this with a Tencent representative. | ||
| Line 154: | Line 154: | ||
===Documentation and other media=== | ===Documentation and other media=== | ||
* [https:// | * [https://www.tencentcloud.com/document/product/436/6222 Cloud Object Storage documentation] | ||
* [https:// | * [https://www.tencentcloud.com/document/product Product documentation] | ||
* [https://main.qcloudimg.com/raw/ea77661307adc3825990e159d851d406.pdf Security whitepaper] | * [https://main.qcloudimg.com/raw/ea77661307adc3825990e159d851d406.pdf Security whitepaper] | ||
===External links=== | ===External links=== | ||
* [https:// | * [https://www.tencentcloud.com/global-infrastructure Tencent Cloud architecture framework or description] | ||
* [https://main.qcloudimg.com/raw/ea77661307adc3825990e159d851d406.pdf Tencent Cloud shared responsibility model] | * [https://main.qcloudimg.com/raw/ea77661307adc3825990e159d851d406.pdf Tencent Cloud shared responsibility model] | ||
* [https:// | * [https://www.tencentcloud.com/services/compliance Tencent Cloud trust center] | ||
==References== | ==References== | ||
{{Reflist|colwidth=30em}} | {{Reflist|colwidth=30em}} | ||
Revision as of 20:20, 4 August 2023
 | |
| Industry | Cloud computing, Web services |
|---|---|
| Founder(s) |
Ma Huateng Zhang Zhidong Xu Chenye Chen Yidan Zeng Liqing |
| Headquarters | Shenzhen, Guangdong, China |
| Area served | Worldwide |
| Key people | Dowson Tong (CEO) |
| Products | IaaS, PaaS, DBaaS, DaaS |
| Revenue | $21.4 billion (Q1 2023)[1] |
| Website | intl.cloud.tencent.com |
Tencent Cloud is a collection of public, private, hybrid, and multicloud cloud computing services offered by Tencent, a Chinese multinational technology conglomerate. Tencent Cloud deploys to an unknown number of data centers in 26 regions and 70 availability zones around the world.[2] More than 70 different products and services are associated with Tencent Cloud, representing elastic computing, networking, content delivery, data storage, database management, security management, enterprise management, data analysis, container and middleware management, developer support, blockchain management, media management, and artificial intelligence.[2]
Provider research
This section uses public information to provide some answers to the 18 questions posed in Chapter 6 of the wiki-based guide Choosing and Implementing a Cloud-based Service for Your Laboratory. In some cases, public information could not be found, and a recommendation to further discuss the question with the cloud service provider (CSP) is made.
1. What experience do you have working with laboratory customers in our specific industry?
Tencent Cloud has been implemented in the laboratories of the National Institute of Biological Sciences, Beijing[3], Shenzhen Technology University[4], Tsinghua University Institute of Biomedicine[5], and ZhongShan University.[3] It's not clear if any laboratory informatics vendors have turned to Tencent Cloud to host their SaaS solutions. A discussion with a Tencent Cloud representative is likely to be able to supply more examples of laboratories and laboratory informatics developers that use or have used Tencent Cloud.
2. Can your solution readily integrate with our other systems and business processes, making it easier for our end users to perform their tasks?
It will ultimately be up to your organization to get an answer from Tencent tailored to your systems and business processes. However, this much can be said about Tencent Cloud integrations. Tencent Cloud doesn't discuss integration approaches extensively, but it does make reference to its API, which "can greatly improve efficiency in performing frequently called functions, and different APIs can be combined to achieve more advanced features, easier automation and remote call as well as higher compatibility." They add that "Tencent Cloud provides an [software development kit] compatible with multiple languages that uniformly encapsulates the APIs of all of its products, allowing you to integrate Tencent Cloud services into your applications, databases or automation scripts with greater efficiency and convenience."[6]
3. What is the average total historical downtime for the service(s) we're interested in?
Little public information is made available about historic outages and downtime. You'll largely have to ask this of Tencent and see what response they give you. Tencent has demonstrated a desire to maintain a high level availability, stating "[t]he Service Availability Across Availability Zones in A Single Region of the Service provided by Tencent Cloud will be no less than 99.995%."[7] You may wish to consult a Tencent Cloud representative on the historic downtime of its solutions. That said, data losses have been reported in 2018[8], though no downtime or outage reports could be found.
4. Do we receive comprehensive downtime support in the case of downtime?
Tencent Cloud does not make this answer clear. However, the answer is likely tied to what after-sales support plan you choose. Confirm with Tencent Cloud what downtime support they provide based on the services your organization are interested in.
5. Where are your servers located, and how is data securely transferred to and from those servers?
Tencent Cloud has 61 availability zones spread across 26 regions made up of China, the United States, South America, Europe, Asia Pacific and other areas. Tencent Cloud uses its Content Delivery Network to "store your content based on caching policies. When a user makes a content request, it will be routed to the node closest to the user, reducing access delay and improving availability."[9] As for data transfer, Tencent Cloud has tools like Data Transfer Service to "securely and easily migrate your database onto the cloud."[10] As for the security of data in transit across servers, Tencent Cloud says little on their website. You'll have to discuss security for data in transit with a representative.
6. Who will have access to our data (including subcontractors), and what credentials, certifications, and compliance training do they have?
In its security whitepaper, Tencent addresses data management personnel and their training in the context of physical security in a few ways[11]
- "Each data center has strict infrastructure and environment access controls based on different levels of regional security requirements. According to the data center personnel category and access rights, a complete personnel access control matrix is established in the access control authorization system to effectively control the access and operation behavior of various personnel in the data center."
- "Tencent Cloud also requires all data center operators and builders to have the corresponding work qualifications and experience, and conducts regular security awareness and ability training for relevant personnel."
- "Tencent Cloud also requires all data center personnel to regularly receive business continuity drill training to ensure the implementation of data center infrastructure security is effective."
For more information about the specific personnel who may have access to your data, discuss this with a Tencent representative.
7. Will our sensitive and regulated data be stored on a machine dedicated to complying with the necessary regulations?
Not all Tencent Cloud machines have the same controls on them; it will depend on the region, product, and compliance requirements of your lab. That said, verify with a representative that the machine your data will land on meets all the necessary regulations affecting your data.
8. How segregated is our cloud data from another customer's, i.e., will lapses of security of another customer's cloud affect our cloud? (It typically won't, but asking the question will hopefully prompt the provider to better explain how your data is segregated.)
Tencent appears use standard virtual machines, hypervisors, and network isolation rules for logical separation.[11] Although it's not 100 percent clear, it appears Tencent Cloud may also has bare metal (physical separation) options in the form of Cloud Physical Machines, "an on-demand physical server rental service provided on a pay-by-usage basis, designed to offer high-performance, securely isolated physical clusters dedicated to cloud."[12] For further information, discuss the topic with a Tencent Cloud representative.
9. Do you have documented data security policies?
Tencent Cloud documents its security practices in several places:
Some security-related documents, like the SOC 2 report, may not be publicly available, requiring direct discussion with a Tencent Cloud representative to obtain them.
10. How do you test your platform's security?
The Tencent website and documentation doesn't appear to even mention penetration testing or red team exercises. It makes reference to its Security Operations Center for customers, but it doesn't appear to talk about its own internal testing. A conversation with a Tencent representative will be necessary to learn more.
11. What are your policies for security audits, intrusion detection, and intrusion reporting?
Audits: Tencent gives several tools for customers to test the security of their own accounts, including CloudAudit. As for its own security audits, Tencent is audited by the SOC[13], though it's not clear at what frequency. A discussion of Tencent's internal security audits will be necessary, along with requests for their SOC reports.
Intrusion detection and reporting: Tencent Cloud provides a tool called Cloud Workload Protection, which "leverages the massive amount of threat data accumulated by Tencent Security and uses machine learning algorithms to provide security services such as intrusion detection and vulnerability alerts.[14] However, it's not clear if Tencent uses the same product internally for its own intrusion detection and alerts. This will be a question for a representative.
12. What data logging information is kept and acted upon in relation to our data?
The company says that "Tencent Cloud keeps detailed logs of all operations in both internal and external management systems for effective risk traceability."[15] However, it gives no further details. A discussion with a Tencent representative will be required to learn more about this topic.
13. How thorough are those logs and can we audit them on-demand?
While information is provided about customers viewing their own logs via solutions such as Cloud Log Service, no information appears to be provided about how customers can view internal logs collected by Tencent on their own infrastructure. You'll have to discuss this with a Tencent representative.
14. For HIPAA-eligible data (e-PHI) we may have, will you sign a business associate agreement?
Tencent states that they release "self-assessment reports for HIPAA compliance, which explain its ability to protect users' personal information and the effectiveness of the control measures taken."[16] However, they make no mention of a business associate agreement in their documentation. You'll have to discuss this topic with a representative.
15. What happens to our data should the contract expire or be terminated?
After scanning the terms of service and general service level agreements, no information was found concerning what happens to your data. Those or other documents may make reference to that information, but it was unable to be found if it exists. Consult with a Tencent representative to get a clear picture of what happens to your data after contract expiration or termination.
16. What happens to our data should you go out of business or suffer a catastrophic event?
"Tencent Cloud has the unique all-purpose placement cluster, which not only provides multiple availability zones in the same region, but also three-layer disaster recovery across physical machines, racks, and switches in an availability zone. Therefore, it has comprehensive disaster tolerance."[11]
17. Can we use your interface to extract our data when we want, and in what format will it be?
Tencent discusses data extraction in in the context of material stored in your Cloud Object Storage, where "you can extract data from individual files stored in buckets using the standard SQL templates we provide or by specifying statements that comply with syntax rules."[17] They also make reference to data extraction in some of its other products. Little is said about the format the data will be in, however. Discuss this with a Tencent representative.
18. Are your support services native or outsourced/offshored?
It is unclear if support personnel are local to the customer or if support is outsourced to another business and country. Discuss this with a Tencent Cloud representative.
Managed security services
Tencent Cloud doesn't appear to provide managed security services for customers.
Additional information
Documentation and other media
External links
- Tencent Cloud architecture framework or description
- Tencent Cloud shared responsibility model
- Tencent Cloud trust center
References
- ↑ Browne, R. (17 May 2023). "Tencent posts fastest jump in quarterly revenue in more than a year after China reopens". CNBC. https://www.cnbc.com/2023/05/17/tencent-q1-earnings-report-2023-.html. Retrieved 04 August 2023.
- ↑ 2.0 2.1 "Tencent Cloud Global Infrastructure". Tencent. https://www.tencentcloud.com/global-infrastructure. Retrieved 04 August 2023.
- ↑ 3.0 3.1 Lau, S.Y. (2020). "“Leveraging ICTs and Digital Government for Innovative Solutions to Address the COVID-19 Pandemic Responses in Africa" (PDF). United Nations. http://www.unpog.org/file/download.asp?sn=345. Retrieved 04 August 2023.
- ↑ Leah; Brian (17 May 2019). "SZTU, Tencent join hands in establishing college and laboratories". Shenzhen Technology University. https://english.sztu.edu.cn/info/1004/1186.htm. Retrieved 04 August 2023.
- ↑ Feifei, F. (28 September 2020). "Tsinghua University, Tencent sign in-depth cooperation agreement". ChinaDaily.com. https://www.chinadaily.com.cn/a/202009/28/WS5f71da3fa31024ad0ba7c6d8.html. Retrieved 04 August 2023.
- ↑ "TencentCloud API". Tencent. https://www.tencentcloud.com/products/api. Retrieved 04 August 2023.
- ↑ "CVM Service Level Agreement". Tencent. 1 November 2020. https://www.tencentcloud.com/document/product/301/30393. Retrieved 04 August 2023.
- ↑ Qianqian, D. (7 August 2018). "Media Firm Demands USD1.6 Million From Tencent Over Cloud Data Loss". Yicai Global. https://www.yicaiglobal.com/news/media-firm-demands-usd16-million-from-tencent-over-cloud-data-loss. Retrieved 04 August 2023.
- ↑ "Product Overview". Tencent Cloud Documentation - Content Delivery Network. Tencent. 15 November 2021. https://www.tencentcloud.com/document/product/228/2939. Retrieved 04 August 2023.
- ↑ "Data Transmission Service". Tencent. https://www.tencentcloud.com/products/dts. Retrieved 04 August 2023.
- ↑ 11.0 11.1 11.2 "Tencent Cloud Security White Paper" (PDF). Tencent. June 2019. https://main.qcloudimg.com/raw/ea77661307adc3825990e159d851d406.pdf. Retrieved 04 August 2023.
- ↑ "Brief". Tencent Documentation. Tencent. 9 May 2017. https://www.tencentcloud.com/document/api/386/7031. Retrieved 04 August 2023.
- ↑ "SOC Audit". Tencent. 19 March 2021. https://intl.cloud.tencent.com/document/product/363/11543. Retrieved 04 August 2023.
- ↑ "Product Introduction". Tencent Cloud Documentation - Cloud Workload Protection. Tencent. 5 September 2022. https://www.tencentcloud.com/document/product/296/2221. Retrieved 04 August 2023.
- ↑ "Notes on Information Security". Tencent Cloud Documentation - TencentDB for MariaDB. Tencent. 9 March 2021. https://www.tencentcloud.com/document/product/237/7478. Retrieved 04 August 2023.
- ↑ "HIPAA". Tencent Cloud Documentation - Compliance. Tencent. 19 February 2020. https://intl.cloud.tencent.com/document/product/363/34541?lang=en. Retrieved 04 August 2023.
- ↑ "Data Extraction". Tencent Cloud Documentation - Cloud Object Storage. Tencent. 28 December 2022. https://www.tencentcloud.com/document/product/436/32538. Retrieved 04 August 2023.
