Zhejiang Government Procurement Cloud's Data Security and Compliance Framework

Zhejiang Government Procurement Cloud (Zhejiang Gongcai Yun) has established itself as a leader in data security and compliance within the government procurement sector. The company holds the most comprehensive security assessment certifications in the industry, including central network information office cloud computing service security assessment, public security department cybersecurity level three certification, and information security management system certification. Notably, it became the first and only SaaS platform nationwide to pass cloud computing service security assessment certification in 2019.

The company operates two major trading platforms: Zhejiang Gongcai Cloud Platform and Le Cai Cloud Platform. The Zhejiang Gongcai Cloud Platform strictly adheres to government procurement policies and regulations, implementing a four-power separation mechanism (procurement party, supplier, regulatory department, and operating institution) with mutual supervision and checks to promote integrity management. The Le Cai Cloud Platform similarly follows relevant laws and regulations, embedding procurement system rules into the platform and achieving standardized separation of positions, procurement processes, and trading rules.

Regarding data security construction, the company follows a 'four-in-one' approach centered on data, building a complete protection system of pre-prevention, in-process protection, and post-traceability. Based on the Data Security Law and Personal Information Protection Law, the company provides differentiated security protection solutions for different types of and levels of data.

The technical research and development team faced three main challenges: lack of clear data classification and grading frameworks in the industry, data invisibility across dispersed IT systems, and high costs for implementing and maintaining data classification strategies. To address these challenges, the team adopted an 'automatic, intelligent, professional' approach, leveraging the complementary advantages of machines and humans to effectively solve these problems.

The Zhejiang Gongcai Cloud Platform is a one-stop cloud service platform that integrates online trading, online supervision, and online services, covering all areas, full processes, and multiple users of government procurement. With coverage across 1,440 administrative divisions nationwide and massive daily data flows, ensuring data security and compliance is crucial for the sustainable and healthy development of government-enterprise procurement.