--- title: "Responsibility sharing for the Web Hosting service" url: https://docs.ovhcloud.com/en/guides/web-cloud/web-hosting/web-hosting-responsibility-sharing lang: en lastUpdated: 2023-08-29 --- # Responsibility sharing for the Web Hosting service ## Objective The RACI below details shared responsibilities between OVHcloud and the customer for the Web Hosting service. This shared model can help relieve the customer's operational burden. | Roles | | -------------------------------------------------------------- | | R: Is in charge of carrying out the process | | A: Is Accountable for the successful completion of the process | | C: Is Consulted during the process | | I: Is Informed of the results of the process | ### 1. Before subscription #### 1.1. Specify service as needed | **Activity** | **Customer** | **OVHcloud** | | ----------------------------------------------------------------------------- | ------------ | ------------ | | Choose the adapted service for your usages | RA | | | Decide the domain name you will use for the website you want to host | RA | | | Choose if a one click module need sto be installed on the Web Hosting plan | RA | | | Add the relevant options if needed (CDN, DNS Anycast, Web Cloud Databases...) | RA | | | Choose SSL certificate type | RA | | ### 2. Service availability #### 2.1. Install service | **Activity** | **Customer** | **OVHcloud** | | -------------------------------------------------------------------------------------------------------------------------- | ------------ | ------------ | | Produce, route, deliver, configure and maintain physical infrastructure, platform and manage resource availability | | RA | | Install, configure (initial configuration) and deliver resources to the customer in accordance with the service subscribed | I | RA | | Send the initial access means to the customer | I | RA | | Personalize the access credentials | RA | | | Choose the service location | I | RA | #### 2.2. Reversibility model | **Activity** | **Customer** | **OVHcloud** | | ------------------------------------------------------------------------------------------------ | ------------ | ------------ | | Choose how you will install the web application in accordance with your reversibility objectives | RA | | | Install manually your web application | RA | | | Install your web application with the one-click module | A | R | | Provide standard protocols and according documentation for importing and exporting data | I | RA | | Import data using standard protocols | RA | | #### 2.3. Customer Information System setup | **Activity** | **Customer** | **OVHcloud** | | ------------------------------------------------------------------------------------- | ------------ | ------------ | | Set up your web application (database link, admin session of the web application...) | RA | | | Set up the terms and conditions of your web application | RA | | | Update service configuration following needs, using the OVHcloud Control Panel or API | RA | | ### 3. Service usage #### 3.1. Operations ##### 3.1.1. Daily operations | **Activity** | **Customer** | **OVHcloud** | | -------------------------------------------------------------------------------------------------------- | ------------ | ------------ | | Publish content on your web application | RA | | | Provide the relevant information to the users about cookies, and their personal data usage when relevant | RA | | | Manage platform availability with enough resources to provide the customer with the service subscribed | | RA | | Manage updates of the platform (security and others) | | RA | | Manage updates of the web application (security and others) | RA | | ##### 3.1.2. Access management | **Activity** | **Customer** | **OVHcloud** | | -------------------------------------------------------------------------- | ------------ | ------------ | | Create, modify, remove accounts in your web application for your customers | RA | | | Create, modify, remove technical accounts in the OVHcloud Control Panel | RA | I | | Create, modify, remove FTP/SSH accounts in the OVHcloud Control Panel | RA | I | ##### 3.1.3. Monitoring | **Activity** | **Customer** | **OVHcloud** | | -------------------------------------------------------------------------------------- | ------------ | ------------ | | Check the resources used for your web application | RA | | | Check the content of your web application | RA | | | Check the overall platform availability and performances | | RA | | Provide service logs with retention defined in service information | | RA | | Save & keep logs according to legal retention depending on the running Web application | RA | | ##### 3.1.4. Storage | **Activity** | **Customer** | **OVHcloud** | | --------------------------------------------------------------- | ------------ | ------------ | | Check if the storage allowed is enough for your web application | RA | | | Perform technical backup of storage and device maintenance | | RA | ##### 3.1.5. Connectivity | **Activity** | **Customer** | **OVHcloud** | | ------------------------------------------------------------- | ------------ | ------------ | | Check if the servers used for your web application are online | | RA | | Manage gateway (emails, web) availability | | RA | | Check if the web application is up and running | RA | | ##### 3.1.6. Management | **Activity** | **Customer** | **OVHcloud** | | -------------------------------------------------------------------------------------------------------------------- | ------------ | ------------ | | Manage the personal data processing register | RA | | | Ensure content in your web application complies with the law and regulations of your country and users countries | RA | | | Manage security of the platform (intrusion, malware, security update, etc.) | | RA | | Manage security of the Web application (intrusion, malware, security update, etc.) | RA | | | Ensure that the content provided by the customer trough the service respects the law & OVHcloud terms and conditions | RA | | ##### 3.1.7. Business continuity | **Activity** | **Customer** | **OVHcloud** | | ---------------------------------------------------------------------------------------------------------------------------------------------- | ------------ | ------------ | | Manage the platform (hardware, OS) | | RA | | Maintain a business continuity and disaster recovery plan for hosted services in accordance with the business criticity of the web application | RA | | | Manage automatic management systems for the provided infrastructure | | RA | #### 3.2. Event management ##### 3.2.1. Incidents | **Activity** | **Customer** | **OVHcloud** | | ------------------------------------------------------------------------ | ------------ | ------------ | | Mitigate DDoS attacks | I | RA | | Restore the web application after a defacing or any other content attack | RA | | | Restore the service in case of server farm deficiency | I | RA | ##### 3.2.2. Changes | **Activity** | **Customer** | **OVHcloud** | | ------------------------------------------------------------------------------------- | ------------ | ------------ | | Update the server farm (low level, OS, platform) | | RA | | Comply with the Web Hosting lifecycle policy of softwares used to provide the service | | RA | | Update the web application | RA | | ### 4. Reversibility #### 4.1. Reversibility model | **Activity** | **Customer** | **OVHcloud** | | ----------------------------------------- | ------------ | ------------ | | Schedule reversibility operations | RA | | | Manage continuity of your web application | RA | | #### 4.2. Data recovery | **Activity** | **Customer** | **OVHcloud** | | ------------------------------- | ------------ | ------------ | | Migrate/transfer data | RA | | | Manage reversibility operations | RA | | ### 5. End of service #### 5.1. Destroying configurations | **Activity** | **Customer** | **OVHcloud** | | --------------------------------------------- | ------------ | ------------ | | Delete web and database servers configuration | I | RA | #### 5.2. Data destruction | **Activity** | **Customer** | **OVHcloud** | | ---------------------------- | ------------ | ------------ | | Destroy web application data | | RA | | Destroy metadata | | RA |