At Vultr, we recognize that security and compliance are shared responsibilities among us, our customers, and any third-party providers involved in delivering products or services. While Vultr manages and secures the platform's control plane, networks, and cloud storage, our data centers handle physical security controls, and customers are responsible for their applications, data, middleware, operating systems, and storage.
			
			Our rigorous risk management policy requires assessments of all third-party vendors, and our vendor management program maintains stringent policies, processes, and controls to vet all third parties involved in delivering Vultr products or marketplace services.
			
			When customers utilize Vultr alongside products and services provided by our data centers, service providers, and vendors, they benefit from a compliance-focused solution that aligns with various frameworks and regulations, streamlining compliance efforts and alleviating the burden of implementing redundant controls.
			
			
				Separation of responsibilities
				
					
						 You manage
					
					
						 Provider managed
					
				 
				
					Infrastructure as a Service
						
							
								Applications
								Data
								Runtime
								Middleware
								O / S
								Virtualization
								Servers
								Storage
								Networking
							 
						 
					 
					
						Platform as a Service
							
								
								Applications
								Data
								Runtime
								Middleware
								O / S
								Virtualization
								Servers
								Storage
								Networking