Common use of DATA CENTERS & NETWORK SECURITY OF THE HOSTING PROVIDER Clause in Contracts

DATA CENTERS & NETWORK SECURITY OF THE HOSTING PROVIDER. Bitrix24 uses Amazon Web Services to store and analyze data, including AWS Cloud infrastructure in Europe (Frankfurt) Region and Europe (Ireland) Region. AVAILABILITY AWS has identified critical system components required to maintain the availability of our system and recover service in the event of outage. Critical system components are backed up across multiple, isolated locations known as Availability Zones. Each Availability Zone is engineered to operate independently with high reliability. Availability Zones are connected to enable you to easily architect applications that automatically fail-over between Availability Zones without interruption. Highly resilient systems, and therefore service availability, is a function of the system design. Through the use of Availability Zones and data replication, AWS Users can achieve extremely short recovery time and recovery point objectives, as well as the highest levels of service availability. BUSINESS CONTINUITY PLAN The AWS Business Continuity Plan outlines measures to avoid and lessen environmental disruptions. It includes operational details about steps to take before, during, and after an event. The Business Continuity Plan is supported by testing that includes simulations of different scenarios. During and after testing, AWS documents people and process performance, corrective actions, and lessons learned with the aim of continuous improvement. MEDIA DESTRUCTION Media storage devices used to store User data are classified by AWS as Critical and treated accordingly, as high impact, throughout their life-cycles. AWS has exacting standards on how to install, service, and eventually destroy the devices when they are no longer useful. When a storage device has reached the end of its useful life, AWS decommissions media using techniques detailed in NIST 800-88. Media that stored User data is not removed from AWS control until it has been securely decommissioned. INFRASTRUCTURE MAINTENANCE GOVERNANCE & RISK

DATA CENTERS & NETWORK SECURITY OF THE HOSTING PROVIDER. Bitrix24 uses Amazon Web Services to store and analyze data, including AWS Cloud infrastructure in Europe (Frankfurt) Region and Europe (Ireland) Region. AVAILABILITY AWS has identified critical system components required to maintain the availability of our system and recover service in the event of outage. Critical system components are backed up across multiple, isolated locations known as Availability Zones. Each Availability Zone is engineered to operate independently with high reliability. Availability Zones are connected to enable you to easily architect applications that automatically fail-over between Availability Zones without interruption. Highly resilient systems, and therefore service availability, is a function of the system design. Through the use of Availability Zones and data replication, AWS Users customers can achieve extremely short recovery time and recovery point objectives, as well as the highest levels of service availability. BUSINESS CONTINUITY PLAN The AWS Business Continuity Plan outlines measures to avoid and lessen environmental disruptions. It includes operational details about steps to take before, during, and after an event. The Business Continuity Plan is supported by testing that includes simulations of different scenarios. During and after testing, AWS documents people and process performance, corrective actions, and lessons learned with the aim of continuous improvement. MEDIA DESTRUCTION Media storage devices used to store User customer data are classified by AWS as Critical and treated accordingly, as high impact, throughout their life-cycles. AWS has exacting standards on how to install, service, and eventually destroy the devices when they are no longer useful. When a storage device has reached the end of its useful life, AWS decommissions media using techniques detailed in NIST 800-88. Media that stored User customer data is not removed from AWS control until it has been securely decommissioned. INFRASTRUCTURE MAINTENANCE GOVERNANCE & RISKRISK potential vulnerabilities is performed through data center risk assessment activities. This assessment is performed in addition to the enterprise-level risk assessment process used to identify and manage risks presented to the business as a whole. This process also takes regional regulatory and environmental risks into consideration.

DATA CENTERS & NETWORK SECURITY OF THE HOSTING PROVIDER. Bitrix24 uses Amazon Web Services to store and analyze data, including AWS Cloud infrastructure in Europe (Frankfurt) Region and Europe (Ireland) Region. AVAILABILITY AWS has identified critical system components required to maintain the availability of our system and recover service in the event of outage. Critical system components are backed up across multiple, isolated locations known as Availability Zones. Each Availability Zone is engineered to operate independently with high reliability. Availability Zones are connected to enable you to easily architect applications that automatically fail-over between Availability Zones without interruption. Highly resilient systems, and therefore service availability, is a function of the system design. Through the use of Availability Zones and data replication, AWS Users customers can achieve extremely short recovery time and recovery point objectives, as well as the highest levels of service availability. BUSINESS CONTINUITY PLAN The AWS Business Continuity Plan outlines measures to avoid and lessen environmental disruptions. It includes operational details about steps to take before, during, and after an event. The Business Continuity Plan is supported by testing that includes simulations of different scenarios. During and after testing, AWS documents people and process performance, corrective actions, and lessons learned with the aim of continuous improvement. MEDIA DESTRUCTION Media storage devices used to store User customer data are classified by AWS as Critical and treated accordingly, as high impact, throughout their life-cycles. AWS has exacting standards on how to install, service, and eventually destroy the devices when they are no longer useful. When a storage device has reached the end of its useful life, AWS decommissions media using techniques detailed in NIST 800-88. Media that stored User customer data is not removed from AWS control until it has been securely decommissioned. INFRASTRUCTURE MAINTENANCE GOVERNANCE & RISKRISK to identify and manage risks presented to the business as a whole. This process also takes regional regulatory and environmental risks into consideration.