Security Commitment

Our Core Security Pillars

• Standardized Compliance: Our processes are aligned with the ISO 27001:2022 standard and the National Security Framework (ENS) requirements.
• Proactive Risk Management: We implement asset protection measures based on continuous risk assessments to mitigate threats such as unauthorized manipulation, fraud, or service interruptions.
• Data Lifecycle Protection: Information is safeguarded throughout its entire lifecycle—from creation and processing to storage and dissemination.
• Access Control & Classification: Data is classified by sensitivity, ensuring that access is strictly controlled and limited to authorized personnel.
• Operational Resilience: ONS maintains robust internal procedures for incident management and disaster recovery to ensure business continuity.
• Continuous Oversight: A dedicated Security Committee oversees the implementation and monitoring of our security policies to ensure they remain effective and up to date.

Support and Subscription Portal

Information Security is a fundamental aspect of the operations at OpenNebula Systems. The company currently has an organization-wide security policy that encompasses corporate security guidelines and best practices, as well as reference frameworks such as the GDPR for personal data protection, IT service security, and the management of contractors and suppliers, among others.

The OpenNebula Software Subscription brings (1) long-term SLA-based enterprise support, (2) a more stable version of the OpenNebula software, and (3) enterprise tools for those companies that manage and operate their own cloud-edge platform in mission-critical or production environments. 

The Subscription service is offered through the OpenNebula Customer Portal OpenNebula.pro, which is hosted by Zendesk. Customer interactions and data management is performed through the Zendesk service. Zendesk offers online all its Compliance Certifications and Memberships.

User and Partner Responsibility

Security is a shared commitment. We ensure that all entities utilizing our services are aware of and adhere to the policy of use for community services, maintaining the integrity of the OpenNebula Ecosystem.