Zadara Announces GDPR Compliant Storage-as-a-Service Solution

Zadara®, a worldwide provider of enterprise-class storage-as-a-service (STaaS), today announced that its award-winning Zadara Storage Cloud and VPSA® services adhere to the European Union’s new General Data Protection Regulation (GDPR). With this announcement, corporate enterprises, service providers and other entities doing business worldwide have a simplified path to completing their own compliance with the requirements of the regulation.

The GDPR (Regulation EU 2016/679) is a new European privacy law, due to become enforceable on May 25, 2018, that protects European Union (EU) citizens’ right to privacy. It introduces robust requirements that will raise standards for personal data privacy, protection, security, and compliance. The GDPR will replace the existing EU Data Protection Directive, and is intended to harmonize data protection laws throughout the EU. The regulation is the most significant and broad reform to data protection law in 20 years, and will globally impact all organizations processing EU subjects data. Organizations who fail to comply will be subjected to large fines.

Zadara Storage Cloud and VPSA Services offer a wide set of controls to assist customers with their own GDPR compliance.

  • Highest level of physical security with biometric locks on Zadara’s equipment cages
  • Strict role-based access control
  • Secured management communication that is always encrypted
  • Data at-rest encryption with customer-owned keys
  • Data in-flight encryption for any data movement
  • Robust identity management with dual-factor authentication
  • Customers can select the region where the data is kept
  • Multi-tenancy with complete networking and resource separation among tenants
  • Data deletion and drive shredding when the data is to be removed

In addition, Zadara conducts ongoing security testing of its Zadara Storage Cloud and VPSA Services. Zadara maintains security certifications such as ISO 27001, SOC 2 Type 2, and HIPAA. These certifications and audit reports can be used for customers risk assessments and help them determine that the proper security measures are in place. Zadara trains all employees on data privacy, to have them aware of Personally Identifiable Information (PII) sensitivity, and the company commitment to be GDPR compliant.

“Zadara has always considered data protection and data privacy to be a number one priority, and has designed these features into its underlying architecture,” said Oded Kellner, vice president of product management and data protection officer at Zadara. “GDPR is now forcing companies worldwide to rethink their internal infrastructure and processes. We are pleased to be taking a leadership position by offering our customers a GDPR-compliant foundation upon which their entire IT operation can be built.”

About Zadara

Zadara® offers enterprise Storage-as-a-Service (STaaS) through the award-winning Zadara Storage Cloud. It can be deployed at any location (cloud, on-premises or hybrid), supporting any data type (block, file and object) and connecting to any protocol (FC, iSCSI, iSER, NFS, CIFS, S3, Swift). The VPSA® Storage Array service provides enterprise SAN and NAS while the VPSA Object Storage service delivers private object storage. Zadara provides resource isolation, exceptional data security, and management control. Zadara is available via OPaaS (On-Premises-as-a-Service) and through a variety of partners including Amazon Web Services (AWS), Microsoft Azure, Google Cloud Platform and others.