guide.en-ie.md

title	excerpt	updated
Responsibility sharing for the Web Hosting service	Shared responsibility between OVHcloud and the customer for the use of the Web hosting service	2023-08-29

Objective

The RACI below details shared responsibilities between OVHcloud and the customer for the Web Hosting service. This shared model can help relieve the customer’s operational burden.

Roles
R: Is in charge of carrying out the process
A: Is Accountable for the successful completion of the process
C: Is Consulted during the process
I: Is Informed of the results of the process

1. Before subscription

1.1. Specify service as needed

Activity	Customer	OVHcloud
Choose the adapted service for your usages	RA
Decide the domain name you will use for the website you want to host	RA
Choose if a one click module need sto be installed on the Web Hosting plan	RA
Add the relevant options if needed (CDN, DNS Anycast, Web Cloud Databases...)	RA
Choose SSL certificate type	RA

2. Service availability

2.1. Install service

Activity	Customer	OVHcloud
Produce, route, deliver, configure and maintain physical infrastructure, platform and manage resource availability		RA
Install, configure (initial configuration) and deliver resources to the customer in accordance with the service subscribed	I	RA
Send the initial access means to the customer	I	RA
Personalize the access credentials	RA
Choose the service location	I	RA

2.2. Reversibility model

Activity	Customer	OVHcloud
Choose how you will install the web application in accordance with your reversibility objectives	RA
Install manually your web application	RA
Install your web application with the one-click module	A	R
Provide standard protocols and according documentation for importing and exporting data	I	RA
Import data using standard protocols	RA

2.3. Customer Information System setup

Activity	Customer	OVHcloud
Set up your web application (database link, admin session of the web application...)	RA
Set up the terms and conditions of your web application	RA
Update service configuration following needs, using the OVHcloud Control Panel or API	RA

3. Service usage

3.1. Operations

3.1.1. Daily operations

Activity	Customer	OVHcloud
Publish content on your web application	RA
Provide the relevant information to the users about cookies, and their personal data usage when relevant	RA
Manage platform availability with enough resources to provide the customer with the service subscribed		RA
Manage updates of the platform (security and others)		RA
Manage updates of the web application (security and others)	RA

3.1.2. Access management

Activity	Customer	OVHcloud
Create, modify, remove accounts in your web application for your customers	RA
Create, modify, remove technical accounts in the OVHcloud Control Panel	RA	I
Create, modify, remove FTP/SSH accounts in the OVHcloud Control Panel	RA	I

3.1.3. Monitoring

Activity	Customer	OVHcloud
Check the resources used for your web application	RA
Check the content of your web application	RA
Check the overall platform availability and performances		RA
Provide service logs with retention defined in service information		RA
Save & keep logs according to legal retention depending on the running Web application	RA

3.1.4. Storage

Activity	Customer	OVHcloud
Check if the storage allowed is enough for your web application	RA
Perform technical backup of storage and device maintenance		RA

3.1.5. Connectivity

Activity	Customer	OVHcloud
Check if the servers used for your web application are online		RA
Manage gateway (emails, web) availability		RA
Check if the web application is up and running	RA

3.1.6. Management

Activity	Customer	OVHcloud
Manage the personal data processing register	RA
Ensure content in your web application complies with the law and regulations of your country and users countries	RA
Manage security of the platform (intrusion, malware, security update, etc.)		RA
Manage security of the Web application (intrusion, malware, security update, etc.)	RA
Ensure that the content provided by the customer trough the service respects the law & OVHcloud terms and conditions	RA

3.1.7. Business continuity

Activity	Customer	OVHcloud
Manage the platform (hardware, OS)		RA
Maintain a business continuity and disaster recovery plan for hosted services in accordance with the business criticity of the web application	RA
Manage automatic management systems for the provided infrastructure		RA

3.2. Event management

3.2.1. Incidents

Activity	Customer	OVHcloud
Mitigate DDoS attacks	I	RA
Restore the web application after a defacing or any other content attack	RA
Restore the service in case of server farm deficiency	I	RA

3.2.2. Changes

Activity	Customer	OVHcloud
Update the server farm (low level, OS, platform)		RA
Comply with the Web Hosting lifecycle policy of softwares used to provide the service		RA
Update the web application	RA

4. Reversibility

4.1. Reversibility model

Activity	Customer	OVHcloud
Schedule reversibility operations	RA
Manage continuity of your web application	RA

4.2. Data recovery

Activity	Customer	OVHcloud
Migrate/transfer data	RA
Manage reversibility operations	RA

5. End of service

5.1. Destroying configurations

Activity	Customer	OVHcloud
Delete web and database servers configuration	I	RA

5.2. Data destruction

Activity	Customer	OVHcloud
Destroy web application data		RA
Destroy metadata		RA