Pukki Service Description - Services for Research

Public Detailed service description

Pukki Database as a Service (DBaaS) is a database on demand self-service. The service makes it possible for other services and users that need a database to outsource that need to the DBaaS. It is possible to create and remove databases both manually and through an API. Users can also manage the user accounts and firewalls for each of their database instances. The service is multi-tenant and all the customers’ databases are segregated through server virtualization. An automatic process creates an encrypted backup of each database instance one per day. The service is running on top of cPouta.

The goal of Pukki Database as a Service is to make it easy and cost efficient for users, services and customers to set up databases and manage them both on the long and short term. The functionalities of the service are:

Creating database instances.
Deleting database instances.
Managing database firewalls.
Managing database users and roles through the service.
Manual and daily automatic backups. Backups are deleted automatically after 90 days.
Restoring backups as new database instances.
Upgrading database versions.
User documentation is in Docs CSC.

Security

The database instances are available over the internet and they are protected by firewalls. Users are responsible for managing their firewalls.
The users are able to manage the accounts that have access to the databases.
Acccess control for managing the database instances is based on the CSC customer’s users and projects.

Certifications

The Information Security Management System of CSC – IT Center of Science Oy is ISO/IEC 27001:2022 certified, with the Pukki service being within scope of the certificate.

User content including personal data in the Service

This service is designed to process personal data.

User must evaluate whether this Service is suitable for their purpose. Please pay attention to special categories of personal data.

When CSC processes personal data in CSC’s services on behalf of the controller, we always require a personal data processing agreement. The user creates the description of processing activities in MyCSC customer portal. Data Processing Agreement.

The Service do not assert ownership or any intellectual property rights to users or customers organisations’ content in the services.

Client’s responsibilities

User must follow all the Terms of Use that applies using the Service.

Service producer’s responsibilities

The service producer ensures that the service is available to customers as described in the service description.

The service producer is responsible for producing and developing the Service.

Service producer

CSC – IT Center for Science Ltd.

Service provider