Certificate/Proof of Data Storage Physical Protection

Question

For a RFP which I am completing I need to supply proof as per below:

> The Proponent hereby acknowledges and confirm that their solution is hosted at data centre with adequate physical security measures that can be attested with SOC 2 Type II report. (Examples: Fence, Security Personnel, Camera, Badge Access, Visitor escort etc.)

Our data is stored on EC2 instances in Canada region and on S3 buckets in Canada region.

Answer

You can get that report at https://aws.amazon.com/compliance/soc-faqs/

Answer

Since you mentioned SOC, then you can refer SOC FAQ, other than that for data security in Canada, refer How do customers maintain ownership and control of customer content section at Personal Information Protection and Electronic Documents Act - Canada’s Federal Private Sector Privacy Legislation.

Enter image description here

This is the parent document.

Same point is mentioned in Data Privacy FAQ as well.

Additional references:

Hope you find this helpful.

Comment here if you have additional questions, happy to help.

Abhishek

![Enter image description here](/media/postImages/original/IMzDicvqnMSYKMdtyJ0nnQCQ)

This is the [parent document](https://aws.amazon.com/compliance/data-privacy/).

Same point is mentioned in [Data Privacy FAQ](https://aws.amazon.com/compliance/data-privacy-faq/) as well.

**Additional references:**

- [Data Privacy at AWS](https://aws.amazon.com/compliance/data-privacy/)

- [Data protection in Amazon EC2](https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/data-protection.html)

- [AWS Service Terms](https://aws.amazon.com/service-terms/)

- [AWS Data Processing Addendum](https://d1.awsstatic.com/legal/aws-dpa/aws-dpa.pdf)

- [AWS Artifacts](https://us-east-1.console.aws.amazon.com/artifact/)

Hope you find this helpful.

Comment here if you have additional questions, happy to help.

Abhishek

Certificate/Proof of Data Storage Physical Protection

Relevant content