ePouta Service Description - Services for Research

Public Detailed service description

ePouta provides Virtual Private Infrastructure-as-a-Service capabilities to end user projects. You can launch virtual machines, set up networks and manage storage within ePouta.

The use of ePouta requires setting up a private network connection between CSC and the using organization.

Virtual machines in ePouta are connected directly to the networks of the customer organization, and all network traffic flows only through the private network connection to the customer organization’s network. Users can further restrict network traffic using security groups.

All project members can manage the resources (virtual machines, storage, networking) of the project. The resources can be managed with over a web interface, using command line tools, or by directly using the service APIs. Tools like Terraform and OpenTofu can be used against ePouta. Users can create separate application credentials for interaction with the service for use cases where automation is needed.

The virtual machines are under the control – and responsibility – of the user. This included user management in the virtual machines and the information security of the virtual machines.

Certifications

The Information Security Management System of CSC – IT Center of Science Oy is ISO/IEC 27001:2022 certified, with the ePouta service being within scope of the certificate.

User content including personal data in the Service

This service is designed process special categories of personal data

User must evaluate whether this Service is suitable for their purpose. Please pay attention to special categories of personal data.

When CSC processes personal data in CSC’s services on behalf of the controller, we always require a personal data processing agreement. The user creates the description of processing activities in MyCSC customer portal. Data Processing Agreement.

The Service does not assert ownership or any intellectual property rights to users or customers organisations’ content in the services.

Client’s responsibilities

User must follow all the Terms of Use that applies using the Service

The client is also responsible for:

Operations and maintenance of the virtual machines
Information security and security updates of the virtual machines
Access control and local user management
Backups of their data

Service producer’s responsibilities

The service producer ensures that the service is available to customers as described in the service description.

The service producer is responsible for producing and developing the Service.

Service producer

CSC – IT Center for Science Ltd.

Service provider