Clever Cloud

Typical Implementation Process for Clever Cloud Software:

1. Account Setup:
   • Create a Clever Cloud account via GitHub or standard registration.

   • Enable Two-Factor Authentication (optional) for added security.

2. Application Creation:
   • Use the Clever Cloud console to create a new application.

   • Select deployment type, runtime, and region based on project requirements.

3. Add-On Configuration:

   • Connect necessary add-ons such as PostgreSQL, Redis, or S3-compatible storage (Cellar).

4. Environment Variable Injection:

   • Configure environment variables for database connections, scalability, and build hooks.

5. Code Deployment:
   • Push code via Git (e.g., git push clever master) or Docker runtime.

   • Monitor deployment logs in the Clever Cloud console.

6. Scaling and Optimization:
   • Set horizontal and vertical scaling options.

   • Adjust instance sizes based on metrics from the dashboard.

7. Domain Setup:

   • Configure custom domains or use default Clever Cloud domains for testing.

8. Monitoring and Testing:
   • Use tools like Grafana and Elastic APM for performance monitoring.
   • Test application functionality post-deployment

Clever Cloud can be customized to fit specific business needs. Here are the key points:

Customization Features:

• Flexible Deployment Options: Supports over 25 programming languages and frameworks, allowing businesses to choose technologies that align with their projects.

• Scalability: Offers both horizontal and vertical scaling, enabling businesses to adjust resources dynamically based on traffic and load.

• Add-Ons and Integrations: Provides a marketplace of add-ons (e.g., PostgreSQL, Redis, MongoDB) that can be linked to applications for tailored functionality.

• On-Premises Solutions: Offers private cloud deployment with customizable packages (Cloud Runtime, Satellite, Air Gap) for businesses requiring full control over infrastructure.

• Custom SLAs: Service Level Agreements can be tailored to meet the criticality of IT projects, ensuring reliability and performance.

• Identity Management: Keycloak-as-a-Service provides customizable authentication and authorization features, including SSO and compliance with various protocols (OAuth 2.0, SAML).

• AI Integration: Clever AI allows businesses to aggregate multiple AI models, customize prompt rules, and manage AI usage securely.

• Environment Variables: Enables configuration of application-specific settings for seamless integration with business processes.

• Custom Scaling Configurations: Businesses can fine-tune the size and number of application instances to optimize performance and cost.

• Data Sovereignty: Ensures compliance with GDPR and other European regulations by offering hosting options in specific regions.

Clever Cloud offers training and support for new users to ensure smooth onboarding and effective use of its platform. Key offerings include:

Training:

1. Onboarding: Personalized onboarding sessions with Clever Cloud engineers to help users understand the platform and deploy their applications effectively.

2. Certification Programs: Training in collaboration with École Hexagone, providing certifications in areas like AI, cybersecurity, and Green IT.

3. Workshops and Masterclasses: Monthly technical workshops for teams to enhance their skills and learn best practices for using Clever Cloud.

4. Step-by-Step Guides: Detailed documentation and tutorials for deploying applications across various frameworks, including Ruby on Rails, Node.js, and WordPress.

Support:

1. Basic Support: Free email-based support for all users, with responses typically within a few hours or up to two business days.

2. Ticket System: Users can open tickets via the console to communicate directly with support engineers during business hours (9 a.m. to 6 p.m. CEST+2).

3. Premium Support: A premium option offers 24/7 critical application support, providing direct access to engineers for urgent issues.

4. UP Program Support: Startups participating in the UP Program receive tailored support, including mentoring, monthly coaching sessions, and visibility on Clever Cloud’s media channels.

Clever Cloud implements a wide range of security measures to protect data, ensuring compliance, reliability, and confidentiality. Key measures include:

Data Encryption

• Encryption of data both at rest and in transit using advanced protocols like TLS to prevent unauthorized access and interception.

Authentication and Access Control

• Strong authentication protocols, including multi-factor authentication (MFA) and Single Sign-On (SSO), are used to secure access to accounts and production environments.

• Access rights are strictly controlled and limited to authorized personnel based on the principle of least privilege.

Immutable Infrastructure

• Applications run in isolated, reproducible environments, ensuring secure deployments. Corrupted code is automatically removed during redeployment.

Monitoring and Logging

• Centralized logging for all product and infrastructure events, with tightly controlled access to logs for auditing purposes.

• Real-time monitoring and incident detection systems to identify and respond to suspicious activities.

Regular Security Updates

• Automated application of security patches and updates to eliminate vulnerabilities promptly.

Data Isolation

• Logical separation of customer data in multi-tenant environments to ensure privacy and security.

• Physical or logical isolation of personal data from non-personal data across customers.

Compliance Standards

• GDPR compliance ensures data sovereignty within Europe.

• ISO 27001 certification for rigorous information security management practices.

• SecNumCloud certification process guarantees high security standards for hosting sensitive data.

Backup and Disaster Recovery;

• Regular backups are stored securely with retention policies (e.g., no longer than 60 days) and disaster recovery plans for rapid response in case of incidents.

Threat Detection:

• Advanced threat detection mechanisms monitor infrastructure for anomalies or unauthorized access attempts.

Physical Security:

• Data centers feature robust physical security measures, including identity verification and restricted access to server rooms.

Commitment to Sovereignty:

• Hosting exclusively in France or partner regions committed to European regulations, ensuring immunity from extraterritorial laws like the Cloud Act.

Clever Cloud releases updates regularly, with a focus on continuous improvement and maintaining platform stability. Here’s how updates are managed:

• Frequency of Updates:

  • Updates are released frequently, as evidenced by the changelog showing multiple updates each month, including new features, runtime additions, and security patches.

• Types of Updates:

  • Updates include new runtime versions (e.g., Python, PHP), database improvements (e.g., PostgreSQL updates), and feature enhancements (e.g., Keycloak integrations, Kubernetes support)

  • Security patches and system updates are also applied automatically during maintenance.

• Management Process:

  • Updates are deployed via automated processes to ensure minimal disruption. For example, applications are redeployed automatically during maintenance to apply patches or integrate new configurations.

  • Clever Cloud uses immutable infrastructure for deployments, ensuring that updates do not affect existing configurations or data integrity.

• Communication to Users:

  • A detailed changelog is maintained in the Developer Center to inform users about new features, changes, and planned deprecations

Clever Cloud policy on data ownership and portability is designed to ensure user control, compliance with European regulations, and seamless transitions. Key aspects include:

Data Ownership:

1. Customer Ownership:

   • Customers retain all intellectual property rights to the data they upload to the platform.

   • Clever Cloud does not exploit or access hosted data unless required for operational purposes or explicitly permitted by the customer.

2. Limited Rights for Platform Operation:

   • Customers grant Clever Cloud a non-exclusive, transferable license to process their data strictly for operating the platform and fulfilling contractual obligations.

Data Portability:

1. Portability Guarantee:

   • Clever Cloud ensures full data portability in compliance with GDPR Article 20, allowing customers to transfer their data in a structured, machine-readable format.

   • Portability is guaranteed should customers decide to leave the platform, ensuring smooth transitions between services.

2. Reversibility:

   • Clever Cloud supports reversibility, enabling customers to retrieve their data without restrictions when exiting the platform.

Compliance and Sovereignty:

1. GDPR Compliance:

   • Clever Cloud adheres to GDPR, ensuring data remains within Europe and is protected from non-European laws like the U.S. Cloud Act.

2. Hosting Options:
   • Customers can choose specific European data centers for hosting their applications and data, ensuring compliance with sovereignty requirements.

Clever Cloud offers flexible terms for scaling up or down to meet changing organizational needs:

Scaling Features:

1. Automatic Scaling:

   • Clever Cloud automatically adjusts resources in real-time based on application load, ensuring optimal performance during traffic spikes or reductions.

2. Horizontal Scaling:

   • Adds or removes application instances (Scalers) as needed. For example, during high traffic, additional instances are launched and balanced, while unused instances are removed during low traffic.

3. Vertical Scaling:

   • Adjusts the size of individual instances by increasing or decreasing CPU and RAM resources. Larger instances are deployed for high loads, and smaller ones are used during lighter loads.

4. Combination of Scaling Methods:

   • Horizontal and vertical scaling can be combined. Vertical scaling is prioritized first (e.g., increasing instance size), followed by horizontal scaling if maximum instance size is reached.

5. Manual Configuration:

   • Users can define maximum and minimum limits for both horizontal and vertical scaling through the Clever Cloud console.

6. Real-Time Optimization::

   • The platform uses probes and orchestrators to monitor resource usage and scale dynamically, ensuring businesses only pay for what they use.

Clever Cloud terms and conditions for contract renewal and cancellation include the following key points:

Contract Renewal

1. Automatic Renewal:

   • Contracts are typically set to renew automatically unless explicitly canceled by the customer.

2. Notification of Price Changes:

   • Clever Cloud reserves the right to revise pricing. Customers are notified at least 30 days in advance of any price changes. Continued use of the platform after this period constitutes acceptance of the new pricing.

3. Customer Flexibility:

   • Customers can terminate their contracts without penalty during the notice period for price changes, effective immediately and without compensation.

Contract Cancellation

1. Customer-Initiated Cancellation:

   • Customers can cancel their contracts at any time by providing written notice through the platform’s account management tools (e.g., account deletion via the web console).

2. Breach of Terms:

   • Clever Cloud reserves the right to suspend or terminate services if customers violate terms or fail to address breaches within specified timeframes.

3. Service Suspension:

   • Temporary or permanent suspension of services may occur for reasons such as repeated misuse, serious violations, or failure to meet payment obligations.

4. Immediate Termination Rights:

   • Customers can terminate their contracts immediately if they disagree with new terms introduced by Clever Cloud, such as pricing changes.

5. Data Reversibility:

   • Clever Cloud guarantees full data portability and reversibility upon termination, ensuring customers can retrieve their data without restrictions.

Clever Cloud meets several compliance standards to ensure data security, privacy, and operational reliability. These include:

GDPR Compliance

• Fully adheres to the General Data Protection Regulation (GDPR), ensuring data sovereignty and protection within Europe.

• Guarantees immunity from non-European laws like the U.S. Cloud Act.

ISO Certifications

1. ISO 27001:2022:

   • An internationally recognized standard for Information Security Management Systems (ISMS).

   • Ensures robust policies, procedures, and controls to protect sensitive information.

2. ISO 9001:

   • Focuses on quality management systems, emphasizing operational excellence and customer satisfaction.

HDS Certification (Health Data Hosting)

• Certified to securely host and process health data in compliance with French regulations.

• Covers all six activities defined by the HDS standard, including infrastructure maintenance, application hosting, and data backups.

SecNumCloud Certification (In Progress)

• Supported by the French government for accelerated certification.

• Ensures compliance with stringent security requirements for cloud services in France.