Finance Cloud features-Alibaba Finance Cloud-阿里云帮助中心

Alibaba Finance Cloud is an industry cloud that serves financial institutions, such as banks, securities firms, insurance companies, and funds. It uses independent data center clusters to provide cloud products that meet financial regulatory requirements. It also offers professional and comprehensive services to customers in the financial industry.

Security compliance

Alibaba Finance Cloud is built to comply with the standards of the People's Bank of China (PBOC) and the China Banking and Insurance Regulatory Commission (CBIRC). It offers significant enhancements in security, service availability, and data reliability.

Alibaba Finance Cloud is built and managed in accordance with the following industry standards:

Financial Industry Standard of the People's Republic of China JR/T 0167-2020: Security Technical Requirements for Financial Applications of Cloud Computing Technology
Financial Industry Standard of the People's Republic of China JR/T 0166-2020: Technical Architecture for Financial Applications of Cloud Computing Technology
Financial Industry Standard of the People's Republic of China JR/T 0168-2020: Disaster Recovery for Financial Applications of Cloud Computing
Assessment Specification for Power Systems in Data Centers of the Financial Industry
Assessment Guide for Classified Protection of Information Security for Information Systems in the Financial Industry
Management Specification for Disaster Recovery of Information Systems in the Banking Industry
General Specification for Information Security of Online Banking Systems
Supervisory Guidelines for Business Continuity in the Commercial Banking Industry
Supervisory Guidelines for Information Technology Outsourcing Risks of Banking Financial Institutions
Specification for the Insurance Information Security Risk Assessment Indicator System
Guidelines for Information System Security Management of Insurance Companies (Trial)
Technical Guidelines for Online Securities Information Systems of Securities Companies
Assessment Requirements for Classified Protection of Information System Security in the Securities and Futures Industry
...

Differences from public cloud

The following figure compares the products and services of Finance Cloud and public cloud.

Category	Item	Public Cloud	Finance Cloud
Compliance	ISO 27001	√	√
	CSA-STAR	√	√
	MLPS Level	MLPS Level 3	MLPS Level 4
	PBOC Specification for Financial Applications of Cloud Computing	No	√
	ISO 20000	√	√
	ISO 22301	√	√
	PCI-DSS	No	√
	SOC Audit	√	√
	Trusted Cloud Initiative	√	√
	CNAS Assessment	√	√
	IDC Class-A Data Center Certification	No	√
Security	Anti-DDoS	Purchase as needed	Purchase as needed
	Bastionhost	Purchase as needed	Purchase as needed
	Cloud Firewall	Purchase as needed	The Basic Edition is provided by default to Finance Cloud customers.
	Disk degaussing	√	√
Availability	Two-region three-data-center architecture	√	√
	Multi-zone Disaster Recovery	√	√
	ECS (SLA)	99.97%	99.98%
	RDS (SLA)	99.95%	99.97%
	SLB (SLA)	99.95%	99.97%
	Redis (SLA)	99.95%	99.97%
	DRDS (SLA)	99.95%	99.97%
	DataWorks (SLA)	99.95%	99.97%
Others	Financial regulatory risk assessment survey	No	√
	Submission of financial industry regulatory reports	No	√
	Financial industry IT compliance services	No	√
	Leased line	√	√
	Hosting for special hybrid cloud devices	No	√
	Customer admission	Open registration	Industry certification
	After-sales service	Standard	Commercial for Finance

Exclusive products and services for Finance Cloud

Independent resource clusters
Stricter data center management
Higher security and disaster recovery capabilities
Stricter network security isolation requirements
Stricter access control
Compliance with bank-level security regulations and requirements
Dedicated teams for Finance Cloud, including security operations, security compliance, and security solutions
Dedicated account managers and cloud architects for Finance Cloud
Stricter user admission criteria