SellerOSS 安全与合规 | Security & Compliance

1. 加密与存储 / Encryption & Storage

传输加密 TLS 1.2+，存储加密 AES-256。数据保存在阿里云 VPC。
TLS 1.2+ encryption in transit, AES-256 at rest. Stored in Alibaba Cloud VPC.

2. 访问控制 / Access Control

最小权限、MFA、唯一账号，权限每 90 天审查。
Least privilege, MFA, unique accounts, reviewed every 90 days.

3. 密码与凭证 / Passwords & Credentials

密码 ≥12 位，含大小写字母、数字、特殊字符，90 天过期。凭证加密存储并定期轮换。
Passwords ≥12 chars with upper/lowercase, numbers, special symbols, expire in 90 days. Credentials encrypted and rotated regularly.

4. 数据保留 / Data Retention

Amazon PII 最长保留 90 天，日志 ≥90 天，备份加密存储并周期清理。
Amazon PII max 90 days, logs ≥90 days, backups encrypted and purged periodically.

5. 漏洞与修复 / Vulnerability Management

季度扫描，年度渗透测试；修复时限：严重 7 天，高危 14 天，中危 30 天，低危 90 天。
Quarterly scans, annual pentests. SLA: Critical 7d / High 14d / Medium 30d / Low 90d.

6. 事件响应 / Incident Response

安全事件 24 小时内通知 Amazon (security@amazon.com)。
Security incidents reported to Amazon within 24h at security@amazon.com.

7. 测试环境 / Test Environment

测试与开发环境禁止使用真实 PII，仅用模拟或脱敏数据。
No real PII in test/dev environments, only masked or dummy data.

8. 合规声明 / Compliance Statement

我们严格遵守 Amazon AUP/DPP 与相关法规，不抓取、不出售数据，仅在卖家授权范围内处理。
We strictly comply with Amazon AUP/DPP and applicable laws. No scraping, no selling, only process data within seller authorization.

9. 联系方式 / Contact

邮箱 Email: selleross@163.com
官网 Website: www.selleross.com

安全与合规 / Security & Compliance