Docs

Application Performance Management Plus

Security and compliance

SDK security and compliance assessment report

In January 2024, APMPlus successfully passed the SDK security and compliance assessment. The assessment was conducted by Shenzhen Wang'an Computer Safety Checking & Measuring Technology Co., Ltd., a leading domestic cybersecurity compliance evaluation agency. Based on "Information Security Technology - Basic Procedures and Requirements for Internet Service Security Evaluation", "Provisions for the Administration of Information Services of Mobile Internet Applications", and "Practical Guide to Network Security Standards - Security Guide for App using Software Development Kit (SDK)", it evaluated APMPlus SDK from two major dimensions, security risks and compliance risks, further divided into eight aspects, and all results met the required criteria. With the rapid growth of mobile Internet and smart devices, app user rights violations have become a major concern for the public and regulators. Volcano Engine continuously provides innovative products and quality services to developers, while placing high importance on data security, compliance, and personal information protection. Passing this SDK assessment further demonstrates APMPlus's strong data security capabilities. In the digital economy era, the importance of information security is self-evident. Volcano Engine will continue to actively respond to and implement national policies and requirements, build more secure, reliable, and professional products and solutions, and promote healthy and sustainable industry development through concrete actions.

Note: This SDK security and compliance assessment is based on national information security laws and regulations, as well as relevant regulatory requirements.

"Cybersecurity Law of the People's Republic of China"

"Consumer Rights and Interests Protection Law"

"Personal Information Protection Law"

"Data Regulations of Shenzhen Special Economic Zone"

"Guidelines for Personal Information Security Protection on the Internet"

"Regulations for the Protection of Personal Information of Telecommunication and Internet Users"

"Information Security Technology - Technology Requirements for Personal Information Protection of Smart Mobile Terminal"

"Information Security Technology - Guideline for Personal Information Protection Within Information System for Public and Commercial Services"

"Information Security Technology - Personal Information Security Specification"

"Regulation on the Network Protection of Children's Personal Information"

"Basic Procedures and Requirements for Internet Service Security Evaluation"

"Information Security Technology - Security Protection Requirements for Internet Interactive Service"

"Provisions on the Administration of Information Services for Mobile Internet Applications"

"Measures for Determining Illegal and Non-compliant Collection and Use of Personal Information on Apps"

"Measures on the Security Assessment for Personal Information and Important Data to be Transmitted Abroad"

"Network Security Standard Practice Guidelines – Necessary Information Specification for Basic Business Functions of Mobile Internet Applications"

"Notice by the Ministry of Industry and Information Technology on Launching a Special Campaign to Crack Down on APP Infringements on Users' Rights and Interests"

"Notice by the Ministry of Industry and Information Technology on Launching a Special Campaign to Further Crack Down on APP Infringements on Users' Rights and Interests"

"Personal Financial Information Protection Technical Specification"

"Security Requirements for Third-Party Software Development Kit (SDK) in Mobile Internet Applications (App)"

Last updated: 2026.09.21 17:56:23