Intellect prioritizes the security and privacy of customers’ data. By leveraging the robust and trusted infrastructure of Amazon Web Services (AWS), you can comply with the General Data Protection Regulation (GDPR) through this comprehensive, multi-layered approach:
GDPR-Compliant Hosting
Data privacy, GDPR compliance, and access controls
Data Subject Rights
AWS provides tools to access, modify, and delete personal data. Services like AWS Lambda and Step Functions enable automation of GDPR-related workflows like handling data deletion requests. Ensuring that your hosting environment can support the exercise of Data Subject Rights is not only a regulatory requirement but also a competitive advantage in building trust with your users and clients.
Data Residency
Global Data Residency Options: Store data in regions of your choice, including within the European Economic Area (EEA), ensuring compliance with GDPR’s data residency requirements.
Efficient Operations: AWS’s global network of data centers allows businesses to operate securely across regions.
Resiliency and Disaster Recovery
Backup and Recovery: Services like Amazon S3, AWS Backup, and Amazon RDS ensure data durability and easy recovery in case of data loss.
Redundancy: High-availability infrastructure ensures continuous access to data, meeting GDPR’s requirements for data protection and integrity.
Access Control & Monitoring
Access Control: Granular access control features through AWS Identity and Access Management (IAM) ensure only authorized users access sensitive data.
Monitoring and Threat Detection: AWS services like CloudTrail, GuardDuty, and Security Hub provide continuous monitoring, logging, and threat detection.
Encryption
AWS offers tools like AWS Key Management Service (KMS) for managing encryption keys to ensure data protection both at rest and in transit:
Data at Rest
Server-Side Encryption (SSE): AWS services like Amazon S3 and Amazon EBS offer SSE using Advanced Encryption Standard (AES) with 256-bit keys (AES-256), ensuring that stored data is encrypted by default.
AWS Key Management Service (KMS): AWS KMS facilitates the creation and control of cryptographic keys, integrating with various AWS services to simplify encryption management. KMS keys are protected by hardware security modules (HSMs) validated under FIPS 140-2 Level 3.
AWS CloudHSM: For customers requiring dedicated control over their encryption keys, AWS CloudHSM provides HSMs that are FIPS 140-2 Level 3 validated, allowing for the secure generation and storage of cryptographic keys.
Your data is encrypted and accessible only by authorized entities.
Data in Transit
Transport Layer Security (TLS): AWS secures data in transit using TLS protocols, ensuring encrypted communication between clients and AWS services. AWS Certificate Manager (ACM) assists in managing SSL/TLS certificates for secure data transmission.
AWS Certificate Manager (ACM): ACM simplifies the process of provisioning, managing, and deploying public and private SSL/TLS certificates.
Virtual Private Cloud (VPC) and VPN Connections: AWS allows customers to establish secure connections between their on-premises environments and AWS infrastructure through Virtual Private Networks (VPNs).
AWS Direct Connect with VPN: For dedicated private connections, AWS Direct Connect can be combined with a Site-to-Site VPN to create an IPsec-encrypted private connection, further securing data in transit.
Certifications and Standards
AWS complies with various certifications, including ISO 27001, ISO 27701, SOC 1/2/3, and the CISPE Data Protection Code of Conduct. In addition, Intellect is ISO 27001 certified, underscoring our commitment to implementing robust information security management practices. This certification ensures that data is handled with the highest level of security and compliance.
