Information Security and Compliance
With top-notch security compliance capabilities and a well-rounded consulting and support system, Alibaba Cloud provides one-stop consulting services to help customers comply with local regulations effortlessly and economically.
Business Challenges
Like the U.S. Privacy Shield framework and the European General Data Protection Regulation (GDPR), China’s Cybersecurity Law (2017) has deeply impacted the regulatory environment and increased the factors that need to be considered when doing business in a major market.
Classified Cybersecurity Protection
Protect your system and data with compliant protection measures in a tiered way.
Risk & Vulnerability Management
Monitoring and managing risks to ensure information security and business continuity.
Cross-border Data Transfer
Meeting complex requirements for data collection and transfer.
Personal Information Protection
Protecting customer information and defending against fraud.
Business Licensing Requirements
Accelerate the compliant online services setup in China.
Business Risk Management
Manage the risks of the online assets and be with compliant with identity verification.
Why Partner with Alibaba Cloud?
As the cloud provider with the most significant market share in China, Alibaba Cloud is well-positioned to assist customers in navigating the regulatory environment in China efficiently and economically.
One-stop Compliance Service
From Compliance Strategy through Execution, we will be there to offer step-by-step assistance.
Comprehensive Certification Coverage
Our comprehensive certification coverage facilitates a smooth entry into China and other global markets.
Market-tested Experience
After over 18 years supporting Alibaba’s compliance, more than 1 million businesses have been assisted with security and compliance services in China.
Top-notch Professional Partners
Alibaba Cloud provides a robust ecosystem that includes industry associations, security software, hardware, compliance consulting, and state-of-the-art solutions.
Speak with Our Professionals to Learn More
Cybersecurity Law Overview
Alibaba Cloud is committed to developing services to help customers and business partners comply with the Cybersecurity Law while progressively reducing their workload and costs.
Tailored Compliance Solutions
Classified Cybersecurity Protection
-
Compliance Requirement
The Cybersecurity Law defines the obligation of the network operator in cybersecurity protection with a tiered concept and implements security measures according to the classified protection scheme.
-
Our Solutions
As a pioneer in Classified Cybersecurity Protection compliance, Alibaba Cloud empowers our customers to be compliant with exclusive insights, sharing resources, comprehensive security product and service portfolios, and a one-stop advisory service.
Risk & Vulnerability Management
-
Compliance Requirement
The Cybersecurity Law requires the network operators to manage the cyber risks and vulnerabilities with the security measures in a well-rounded way. These measures include any preventive, detective, and corrective mechanisms to address the vulnerability, virus, attacks, and intrusions.
-
Our Solutions
Alibaba Cloud's security products and services are committed to providing simple, secure, and intelligent security services based on our extensive, accumulated experiences. Alibaba Cloud security services enable you to protect your information and systems with the comprehensive preventive, detective, and corrective mechanisms.
Our security services include Managed Security Service, Professional Safeguard, Penetration Test, Emergency Response. -
Security Services
Alibaba Cloud's security services include Managed Security Service, Professional Safeguard, Penetration Test, and Emergency Response.
Cross-Border Data Transfer
-
Compliance Requirement
The Cybersecurity Law makes it clear that under certain circumstances “Personal information and important business data… shall be stored in Mainland China”, and has detailed requirements on cross-border data transfer, which covers various data scenarios in business operation practice, such as customer data and confidential data. In addition, only qualified network products and services shall be applied with the necessary security measures implemented.
-
Our Solutions
Alibaba Cloud provides a comprehensive data cross-border solution that includes the risk assessment advisory services with our reputable ecosystem partners and the comprehensive network products. Together, these solutions allow for compliant data cross-border practices.
Personal Information Protection
-
Compliance Requirement
The Cybersecurity Law stipulates the requirements in personal data protection and emphasizes the technical measures to prevent, detect, and remediate any risks or potential risks in personal data protection.
-
Our Solutions
The Alibaba Cloud data security solution speeds up the implementation of necessary technical measures in protecting personal data with our comprehensive security products such as Sensitive Data Discovery & Protection (SDDP) and Key Management Services (KMS).
Business Licensing Requirements
-
Compliance Requirement
According to the Measures for the Administration of Internet Information Services, all websites and mobile apps hoping to provide services in Mainland China must first obtain ICP registration to operate lawfully.
-
Our Solutions
We help customers with a comprehensive solution to build a website that is optimized for China including Domain Registration and ICP Registration services. We work closely with our partners to provide a one-stop solution for customers to accelerate their process of building a China-ready business.
Business Risk Management - Real Identity Verification
-
Compliance Request
The Cybersecurity Law has very detailed requirements in this area. For many businesses, a major concern would be Real Identity Verification. If you are doing business in a large, complicated, and growing market, it is always challenging to defend against fraud and hacking. It is especially important if you are in the e-commerce, finance, logistics, hospitality, or entertainment industries.
-
Our Solutions
To defend against fraudulent activities, facial recognition and real identity verification can be used widely and for a variety of purposes. Real Identity Verification is an ID authentication solution that leverages the Alibaba Cloud Facial Recognition and Big Data risk management model to detect identity fraud.
Business Risk Management - Content Security and Compliance
-
Compliance Request
The Cybersecurity Law requests businesses to make sure their websites do not host superstitious, sexually suggestive, violent, or gambling-related content. This is especially challenging if a business hosts User Generated Content (UGC) online.
-
Our Solutions
The Content Moderation service leverages Deep Learning technology and benefits from Alibaba's years of Big Data analysis to provide accurate monitoring of pictures, video, text, and other multimedia content. Constant automated moderation responds in less than 0.1 seconds with an accuracy rate of 95% or higher.
Resources
Whitepaper
Understanding China's Cybersecurity Law
Whitepaper
Smoothing ICP Registration
Whitepaper
Compliance in the Digital World
Webinar
Under the New Cybersecurity Law
Webinar
Cybersecurity Compliance Solutions
Webinar
ICP Registration Guide
![]()
Security & Compliance
Security & Compliance
Look into our Trust Center to get a comprehensive understanding of Alibaba Cloud Security and Compliance portfolio.
![]()
China Gateway
China Gateway
Explore more details about how Alibaba Cloud can enable your business success in China.
