InterPARES Trust Project Final Report Title: 10-Contract Terms with Cloud Service Providers Status: Final Version: 3 Date submitted: 2016-01-30 Last reviewed: 2016-01-30 Author: InterPARES Trust Project Writer(s): Robert McLelland and Grant Hurley with additional contributions from Daniel Collins Research domain: Infrastructure URL: Project lead Yvette Hackett 1 Document Control Version history Version Date By Version notes 1.0 Feb 12, 2014 YH, GH, RM Drafted and submitted 1.0 Feb 15, 2014 CR Formatted, minor copy edits 2.0 May 18, 2014 RM Changed category group names, added discussion on European cloud service providers, added analysis of European contacts, enhanced conclusion paragraph. 3.0 January 30, RM Added section on terminology, final 2016 proof reading. 2 Table of Contents 1. Introduction ........................................................................................................................................ 6 2. Purpose and Scope of Study ........................................................................................................... 6 3. Methodology ....................................................................................................................................... 6 3.1 Terminology ............................................................................................................................... 7 4. Overview of the Cloud ...................................................................................................................... 7 4.1 Types of Cloud ........................................................................................................................... 7 4.2 Types of Cloud Services .......................................................................................................... 8 4.3 Types of Contracts .................................................................................................................... 9 5. Literature Review ............................................................................................................................ 10 6. Legal Cases ..................................................................................................................................... 12 6.1 Privacy ...................................................................................................................................... 12 6.2 Storage and Copyright ............................................................................................................ 12 6.3 Jurisdiction ............................................................................................................................... 13 7. Public Sector Considerations .................................................................................................... 13 7.1 Federal Governments ............................................................................................................. 13 7.1.1 Shared Services Canada ..................................................................................................... 14 7.1.2 FedRAMP ............................................................................................................................ 14 7.2 Provincial/State and Local Governments ............................................................................. 15 7.2.1 Ontario Geo Portal ............................................................................................................. 16 7.3 Universities ............................................................................................................................... 16 7.3.1 University of Alberta ................................................................................................................. 17 7.3.2 Educloud ........................................................................................................................... 17 7.3.3 Educause ............................................................................................................................ 18 8. Companies Selected ....................................................................................................................... 18 8.1 United States ........................................................................................................................... 18 8.1.1 Google ................................................................................................................................ 18 8.1.2 Amazon .............................................................................................................................. 20 3 8.1.3 Rackspace ........................................................................................................................... 20 8.1.4 ProfitBricks ......................................................................................................................... 21 8.2 Canada ..................................................................................................................................... 21 8.2.1 Telus ................................................................................................................................... 21 8.2.2 Storagepipe ........................................................................................................................ 21 8.2.3 Titanfile .............................................................................................................................. 22 8.2.4 Pathway Communications ................................................................................................. 22 8.2.5 OpenText Corporation ....................................................................................................... 23 8.3 Europe ...................................................................................................................................... 23 8.3.1 CityNetwork ....................................................................................................................... 23 8.3.2 CloudSigma ........................................................................................................................ 24 8.3.3 GreenQloud ........................................................................................................................ 24 8.3.4 T-Systems ........................................................................................................................... 25 9. Identified Categories of Contract Terms ...................................................................................... 25 9.1 Group 1: General Destruction Guarantee ............................................................................ 25 9.2 Group 1: Specific Destruction Method .................................................................................. 26 9.3 Group 1: Destruction on Contract Termination ................................................................... 26 9.4 Group 2: Service Continuity ................................................................................................... 27 9.5 Group 2: Outages .................................................................................................................... 27 9.6 Group 2: Disaster Recovery Plan ......................................................................................... 27 9.7 Group 3: General Security Provisions .................................................................................. 28 9.8 Group 3: Physical Security Specifications ........................................................................... 28 9.9 Group 3: Technological Security Specifications .................................................................. 28 9.10 Group 3: Tiered Security Provisions ..................................................................................... 28 9.11 Group 4: Territory of Storage ................................................................................................. 29 9.12 Group 4: Copyright/Ownership .............................................................................................. 29 9.13 Group 4: General Privacy ....................................................................................................... 29 9.14 Group 4: Privacy Policy .......................................................................................................... 29 9.15 Group 4: Privacy Legislation .................................................................................................. 29 4 10. Conclusion .................................................................................................................................... 30 11. Summary Tables and Specific Contract Term Language ...................................................... 31 11.1 United States .......................................................................................................................... 31 11.1.1 Google ................................................................................................................................ 32 11.1.2 Amazon .............................................................................................................................. 34 11.1.3 Rackspace ........................................................................................................................... 35 11.1.4 ProfitBricks ......................................................................................................................... 36 11.2 Canada