Shared responsibility
What Netstream is responsible for and what you are responsible for
The principle
The security and operation of our services are based on shared responsibility. Netstream provides a secure infrastructure, defined protection mechanisms and the operation of the agreed services.
You are responsible for how you use the services, for your users and for your data. Exactly what falls within whose area depends on the service you have booked or is set out in the individual service agreement.
Overview
| Area | Netstream | Customer |
|---|---|---|
| Infrastructure and data centre | Operation, physical security, redundancy | – |
| Platform and services | Operation, monitoring, updates and patches within the scope of services | Configuration in line with Netstream's requirements |
| Users and access | Implementation of changes, blocking in an emergency | Naming authorised persons, requesting and promptly reporting joiners and leavers |
| Data | Processing in accordance with the data processing agreement | Classification, protection and backup of your own data |
| End devices and connection | – | Provision and maintenance of end devices, network and internet connection |
| Your own infrastructure | – | Protection against unauthorised access, state of the art |
| Compliance with policies | Provision of the policies | Compliance by your users, incl. the Acceptable Use Policy |
| Security incidents | Coordination of measures, instructions for action | Immediate reporting of incidents and suspected incidents |
Data backup
You retain control over your data and are responsible for backing it up.
If you pass on services
If you provide our services to your own end customers, for example as a partner or managed service provider, you must impose the applicable terms of use on them in at least an equivalent form. You remain responsible to Netstream for their compliance.