Understanding your responsibilities when using IBM Verify

Learn about the management responsibilities and terms and conditions that you have when you use IBM® Verify. For a high-level view of the service types in IBM Cloud® and the breakdown of responsibilities between the customer and IBM Verify for each type, see Shared responsibilities for IBM Cloud offerings.

Review the following sections for the specific responsibilities for you and for IBM Verify when you use IBM Verify. For the overall terms of use, see IBM Cloud® Terms and Notices.

Incident and operations management

Incident and operations management includes tasks such as monitoring, event management, high availability, problem determination, recovery, and full state backup and recovery.

Table 1. Responsibilities for incident and operations
The rows are read from left to right. The first column describes the task that the customer or IBM might be responsibility for. The second column describes IBM Verify responsibilities for that task. The third column describes your responsibilities as the customer for that task.
	IBM Verify Responsibilities	Your Responsibilities
Monitoring	IBM Verify is responsible for hosting monitoring and health services.	The Client is responsible for visiting the IBM Security status page to see where they may be affected.
High Availability	IBM Verify is responsible for deploying the service across availability zones and multi data centers. IBM Verify provides replication, fail-over features, and infrastructure maintenance or updates.	The Client is responsible for designing application logic to connect to communicating with the service, for example, retry logins, create users, and more that may be caused by temporary failures.

Change management

Change management includes tasks such as deployment, configuration, upgrades, patching, configuration changes, and deletion.

Table 2. Responsibilities for change management
The rows are read from left to right. The first column describes the task that the customer or IBM might be responsibility for. The second column describes IBM Verify responsibilities for that task. The third column describes your responsibilities as the customer for that task.
	IBM Verify Responsibilities	Your Responsibilities
Scaling	IBM Verify is responsible for scaling infrastructure to meet client requests.	The Client is responsible for properly configuring the application.
Feature deployment and installation	IBM Verify is responsible for deploying new features into the customer environment.	The Client is responsible for configuring and setting up the newly added features as desired to use. What’s new can be found in the IBM Verify documentation.

Security and regulation compliance

Security and regulation compliance includes tasks such as security controls implementation and compliance certification.

Table 4. Responsibilites for security and regulation compliance
The rows are read from left to right. The first column describes the task that the customer or IBM might be responsibility for. The second column describes IBM Verify responsibilities for that task. The third column describes your responsibilities as the customer for that task.
	IBM Verify Responsibilities	Your Responsibilities
Encryption	IBM Verify is responsible for the encryption of data in motion and rest. This is defined in the IBM Verify data sheet.	N/A
Security	IBM Verify is responsible for the security of data and operations. This can be seen in the IBM Verify data sheet.	The Client is responsible for managing the account profiles, applications, and other aspects when configuring the service.
Compliance	IBM Verify is responsible for ensuring adherence, auditing, and certification of compliance listed in the IBM Verify data sheet.	The Client is responsible as the Data Controller.

Disaster recovery

Disaster recovery includes tasks such as providing dependencies on disaster recovery sites, provision disaster recovery environments, data and configuration backup, replicating data and configuration to the disaster recovery environment, and failover on disaster events.

Table 5. Responsibilites for disaster recovery
The rows are read from left to right. The first column describes the task that the customer or IBM might be responsibility for. The second column describes IBM Verify responsibilities for that task. The third column describes your responsibilities as the customer for that task.
	IBM Verify Responsibilities	Your Responsibilities
Backups and restore	IBM Verify is responsible for automatic daily backups, as well as monitoring the state of client backups. This can be seen in the IBM Verify data sheet.	N/A