When you move workloads to a cloud provider, security splits in two. We secure the infrastructure underneath your workloads, and you secure the environment you build on it. Here's where the line sits.
We run the hardware, the multi-node high-availability cluster and the platform on top of it, in a Digital Realty Tier 3 certified data center. That layer is ours to secure and maintain.
Each KVPC is your own private network behind an edge firewall you control. You segment workloads into VLANs and subnets, and you write the firewall rules that decide what traffic reaches them.
Traffic on the network beneath your compute instances is encrypted end to end. Between your sites and your KVPC, you run VPN connections over IKEv2, OpenVPN, IPsec or WireGuard.
KASTERVO is PCI-DSS compliant as a Level 2 service provider. Our compliance covers the platform. Whether the applications you run on it meet PCI-DSS is your responsibility.
Customer data is stored in the EU and handled under GDPR, which matters when your clients or your regulator ask where your data is kept.
Everything you run on the platform is yours to secure: the operating systems and software you install, how you configure them, and who has access. If you want us to take on infrastructure or OS-level tasks, we quote a paid support plan for your setup.