Shared Responsibility Model

Understanding our mutual obligations for security and compliance

Purpose

This Shared Responsibility Model outlines how responsibilities for data security, privacy, and compliance are divided between:

GDH SAS (LogCentral Provider): Responsible for the underlying infrastructure and core service components.
Customer (You): Responsible for the data you submit (including logs) and how you configure and use the LogCentral service.

GDH SAS (LogCentral) Responsibilities

Infrastructure Security & Availability

Maintain secure hosting environments via reputable third-party data centers
Implement network security measures including firewalls and encryption
Manage high availability and reliability of core systems

Platform & Software Maintenance

Develop and maintain the LogCentral software
Apply patches, security updates, and enhancements
Monitor and upgrade systems to comply with security standards

Sub-Processor Management

Conduct due diligence on approved sub-processors
Ensure data protection obligations through written agreements

Customer Responsibilities

Data Governance & Ownership

Ensure legal right to collect and process data
Own decisions regarding data included in logs
Avoid submitting unnecessary personal data

Account Management & Access Control

Protect account credentials
Manage user permissions within Organizations
Monitor third-party access

Responsibility Matrix

Responsibility Area	GDH SAS (LogCentral)	Customer
Physical & Network Security	Yes	-
Cloud Infrastructure Security	Yes	-
Log Storage Backend Management	Yes	-
Encryption in Transit (TLS)	Yes	-
Account-Level Access Management	-	Yes
Data Minimization / Avoid PII	-	Yes
Monitoring Log Content	-	Yes
Data Subject Requests (GDPR)	Assistance	Primary

Integration With Other Agreements

This Shared Responsibility Model supplements but does not supersede:

Contact Information

If you have questions about this Shared Responsibility Model or need clarification on specific responsibilities, please contact us at [email protected].

Responsibility Area

GDH SAS (LogCentral)

Customer

Physical & Network Security

Yes

Cloud Infrastructure Security

Yes

Log Storage Backend Management

Yes

Encryption in Transit (TLS)

Yes

Account-Level Access Management

Yes

Data Minimization / Avoid PII

Yes

Monitoring Log Content

Yes

Data Subject Requests (GDPR)

Assistance

Primary

Shared Responsibility Model

Infrastructure Security & Availability

Platform & Software Maintenance

Sub-Processor Management

Data Governance & Ownership

Account Management & Access Control

Loading...

Shared Responsibility Model

Infrastructure Security & Availability

Platform & Software Maintenance

Sub-Processor Management

Data Governance & Ownership

Account Management & Access Control