feat(storage): update

Author: SamyOubouaziz

pages/object-storage/how-to/host-healthcare-data.mdx

@@ -1,7 +1,7 @@
 ---
 title: How to create a compliant bucket to host healthcare data
 description: This page details the steps to follow to create a compliant bucket using Scaleway Object Storage to host healthcare data
-tags: 
+tags: hds healthcare data health compliant compliance regulatory
 dates:
   validation: 2025-11-12
   posted: 2025-11-12
@@ -44,7 +44,7 @@ To host healthcare data in compliance with HDS requirements, you must create a n
 
 7. Enable [bucket versioning](/object-storage/how-to/use-bucket-versioning/) if you want to store multiple versions of your objects (this may lead to higher storage costs).
 
-8. Optionally, you can use the cost estimator to simulate your Object Storage costs.
+8. Optionally, you can use the cost estimator to estimate your Object Storage costs.
 
 9. Click **Create bucket** to confirm.
 
@@ -82,7 +82,7 @@ Refer to the [dedicated documentation](/object-storage/api-cli/enable-sse-c/) fo
 
 ### Customer-side encryption
 
-Customer-side encryption ensures that sensitive data is protected before reaching Scaleway Object Storage, giving you control over the encryption mechanism, and keys management. This method must be used in combination with [Scaleway's HDS-compliant deletion method](#deleting-objects-with-customer-side-encryption).
+Customer-side encryption ensures that sensitive data is protected before reaching Scaleway Object Storage, giving you control over the encryption mechanism, and key management. This method must be used in combination with [Scaleway's HDS-compliant deletion method](#deleting-objects-with-customer-side-encryption).
 
 ## How to delete objects
 

pages/object-storage/reference-content/storage-shared-responsibility-model.mdx

@@ -9,55 +9,55 @@ dates:
 
 This document outlines the roles and responsibilities for maintaining and securing your Scaleway storage services, Block Storage and Object Storage including Glacier. Our shared responsibility model clarifies the division of duties between Scaleway and our users, ensuring clarity in managing availability, backups, configurations, and security measures for your storage solutions. By understanding this shared responsibility, you can optimize the performance, reliability, and security of your Scaleway storage services.
 
-## Service Provision
+## Service provision
 
 Scaleway is responsible for the operational maintenance of all components essential to providing the Service. These include:
 
-*   **Physical Infrastructure:** Managing the physical sites that house the hardware infrastructure used for the Service.
+*   **Physical infrastructure:** Managing the physical sites that house the hardware infrastructure used for the Service.
 
-*   **Hardware Infrastructure:** Maintaining the underlying hardware. Monitors resource utilization rate and updates its capacity plan.
+*   **Hardware infrastructure:** Maintaining the underlying hardware. Monitors resource utilization rate and updates its capacity plan.
 
-*   **Virtual Infrastructure:** Ensuring the functionality of the virtualized environment.
+*   **Virtual infrastructure:** Ensuring the functionality of the virtualized environment.
 
-*   **Hosting Platform:** Operating the application and database hosting platform.
+*   **Hosting platform:** Operating the application and database hosting platform.
 
-*   **Network:** Establishes storage space connectivity in its default configuration.
+*   **Network:** Establishing storage space connectivity in its default configuration.
 
-*   **Applications and Databases:** Maintaining the applications and databases themselves.
+*   **Applications and databases:** Maintaining the applications and databases themselves.
 
 Furthermore, Scaleway procures the necessary licenses and usage rights for any third-party solutions that are either used by Scaleway in delivering the Service or made available to the client as part of the Service. It provides the client with necessary information regarding the characteristics and conditions of use of the Service. It also plans and implements updates to the various Service components also considering third-party products used within the Service.
 
 You are responsible to ensure that users comply with the Service's terms of use.
 
-Scaleway is responsible for monitoring, managing, and forecasting the Services APIs and physical clusters capacity.
+Scaleway is responsible for monitoring, managing, and forecasting the Service APIs and physical cluster capacity.
 
-You are responsible for informing Scaleway ahead of time for significant changes in your storage capacity forecast.
+You are responsible for informing Scaleway ahead of time of significant changes in your storage capacity forecast.
 
-## Logs and Monitoring
+## Logs and monitoring
 
 Scaleway is responsible for the proper monitoring of the Service, including:
 
 *   Retaining access logs and event traces related to the use and administration of the Services, such as objects and storage spaces (volumes, buckets) creation and deletion, server configuration (including physical and software resource configuration), and user and access rights additions and deletions.
 
 *   Making access logs and event traces available to the client upon request.
 
-### Your Responsibilities
+### Your responsibilities
 
 *   Retain access logs and event traces provided by the Service Provider.
 
 *   Ensure the successful completion of tasks performed while using the Service (e.g., volume creation for Block Storage, implementing integrity checksums for Object Storage).
 
-*   Monitoring the available and remaining space within your provisionned volumes.
+*   Monitor the available and remaining space within your provisioned volumes.
 
-## Product Resiliency
+## Product resiliency
 
-### Availability and Steadiness
+### Availability and steadiness
 
-Scaleway ensures high availability through resilient infrastructure, technical and organizational measures, including monitoring service health and incident detection for the data hosted within the Service. Scaleway provides and maintains the operational condition of the control plane and APIs.
+Scaleway ensures high availability through resilient infrastructure, and technical and organizational measures, including monitoring service health and incident detection for the data hosted within the Service. Scaleway provides and maintains the operational condition of the control plane and APIs.
 
 Scaleway is responsible for:
 
-*   Implementing resiliency for the Services at least within an Availability Zone (AZ), and for multi-AZ storage tiers only across multiple Availability Zones.
+*   Implementing resiliency for the Services within at least an Availability Zone (AZ), and for multi-AZ storage tiers only, across multiple Availability Zones.
 
 *   Monitoring service health, performance, and balancing the load of use of the Service.
 
@@ -67,15 +67,15 @@ You are responsible for:
 
 *   Configuring the Service in accordance with your needs, particularly in terms of availability.
 
-*   Monitoring and notifying breaches of Service Level Agreement concerning the availability of the service.
+*   Monitoring and notifying us of breaches of Service Level Agreement concerning the availability of the service.
 
 #### Performance
 
-You are responsible for optimizing your applications' use of Storage Services. Scaleway monitors and optimize infrastructure-level performance, but note that:
+You are responsible for optimizing your applications' use of Storage Services. Scaleway monitors and optimizes infrastructure-level performance, but note that:
 
 *   Glacier cold storage data access requires object restoration and can incur delays,
 
-*   For Object Storage Service, multipart uploads and concurrent requests should be used for large files.
+*   For the Object Storage Service, multipart uploads and concurrent requests should be used for large files.
 
 **Data Integrity**
 
@@ -85,27 +85,27 @@ For all Storage Services, you are responsible for:
 
 *   Verifying the successful completion and integrity of backups.
 
-For the Object Storage Service, Scaleway provides a checksum of each uploaded object allowing the client to perform integrity control or control the integrity of the checksum provided to the client at the time of upload, if applicable.
+For the Object Storage Service, Scaleway provides a checksum of each uploaded object, allowing the client to perform integrity control or control the integrity of the checksum provided to the client at the time of upload, if applicable.
 
 You are responsible for:
 
 *   Verifying the successful completion of the upload via a checksum control.
 
 *   Controlling the availability and integrity of objects, and restoring damaged objects.   
 
-## Backups and Replication 
+## Backups and replication 
 
 While Scaleway provides internal resiliency mechanisms and features, it is your responsibility to implement a backup strategy appropriate to your needs and the criticality of your activities, including:
 
 *   External backups.
 
 *   Replication to other regions (as allowed by regulations).
 
-*   Management over your backups and snapshots, and regular control of their integrity.  
+*   Management of your backups and snapshots, and regular verification of their integrity.  
 
 Internal resilience does not protect against accidental deletions or application-level corruption.
 
-## Configuration and Management
+## Configuration and management
 
 Scaleway is responsible for the configuration of API and dataplane settings.
 
@@ -117,39 +117,39 @@ You are responsible for:
 
 *   Provisioning additional space or storage spaces according to your needs
 
-*   Managing volumes attachment, detachment and deletion according to your needs
+*   Managing volume attachment, detachment, and deletion according to your needs
 
-*   Managing snapshots and snapshots deletion according to your needs
+*   Managing snapshots, and snapshots deletion according to your needs
 
-### Object Storage Class & Lifecycle Rules
+### Object Storage class & lifecycle rules
 
-You are responsible for selecting appropriate storage classes, cleanup unnecessary parts or data, and using lifecycle rules according to your needs. Note that a delay may occur if transitioning or expiring a high number of objects through lifecycle rules per day.
+You are responsible for selecting appropriate storage classes, cleaning up unnecessary parts or data, and using lifecycle rules according to your needs. Note that a delay may occur if transitioning or expiring a high number of objects through lifecycle rules per day.
 
-### Access Control 
+### Access control 
 
 Scaleway provides versioning, IAM, and specific Service-level access control tools (ACLs, bucket policies.)
 
-You are responsible for managing authorizations and access of your personnel to the Service (Console, API and storage spaces), also ensuring the security of your personnel's authentication means. Your responsibilities include:
+You are responsible for managing authorizations and access of your personnel to the Service (Console, API and storage spaces), and for ensuring the security of your personnel's authentication means. Your responsibilities include:
 
 *   Ensuring public visibility settings align with your intentions.
 
 *   Regularly reviewing access rules and permissions.
 
 *   Activating two-factor authentication (2FA).
 
-*   Configuring bucket policies (access limitation under certain conditions such as IP with white list and black list (allow or deny, IP range)).
+*   Configuring bucket policies (enforcing access limitations under certain conditions such as whitelisting or blacklisting certain IPs (allow or deny, IP range)).
 
-Scaleway enforces your configurations but does not intervene in their definition or maintenance.
+Scaleway enforces your configurations but does not intervene in its definition or maintenance.
 
 ### Versioning
 
-You are responsible for
+You are responsible for:
 
 *   Enabling or deactivating versioning for data recovery.
 
-*   Managing versioned object lifecycle according to your needs.
+*   Managing versioned objects' lifecycle according to your needs.
 
-## Encryption and Data Deletion
+## Encryption and data deletion
 
 ### Encryption
 
@@ -165,7 +165,7 @@ For client-side encryption or customer-managed encryption keys, you are responsi
 
 *   Ensuring data becomes permanently inaccessible when keys are destroyed.
 
-### Encryption in Transit
+### Encryption in transit
 
 Scaleway provides secure HTTPS endpoints. You must:
 
@@ -175,9 +175,9 @@ Scaleway provides secure HTTPS endpoints. You must:
 
 *   Validate certificates and enforce TLS in custom tools.
 
-### Data Deletion
+### Data deletion
 
-Deletion is initiated only by you, manually or via configured retention rules.
+Deletion is initiated only by you, manually, or via configured retention rules.
 
 Scaleway:
 
@@ -187,15 +187,15 @@ Scaleway:
 
 *   Cannot recover data if versioning is not enabled.
 
-## Data Residency
+## Data residency
 
 *   The customer is responsible for selecting the data location at the time of volume/bucket creation.
 
 *   Scaleway commits not to modify the geographical location of data without the prior agreement of the customer.
 
 *   The Glacier class systematically stores objects in Paris, regardless of the Region chosen for the bucket.
 
-## Identity and Access Management
+## Identity and access management
 
 Scaleway provides tools for access control (IAM, ACLs, and policies). You are responsible for:
 
@@ -207,9 +207,9 @@ Scaleway provides tools for access control (IAM, ACLs, and policies). You are re
 
 *   Detecting and responding to unauthorized access.
 
-## Platform and Service Security
+## Platform and service security
 
-### Scaleway Responsibilities
+### Scaleway responsibilities
 
 Scaleway ensures:
 
@@ -227,7 +227,7 @@ Scaleway manages and monitors vulnerabilities related to the provision of its Se
 
 See Security & Resilience and Trust Center.
 
-### User Responsibilities
+### User responsibilities
 
 You are responsible for:
 
@@ -271,7 +271,7 @@ Scaleway undertakes to:
 
 This section outlines the specific requirements and responsibilities for hosting healthcare data in compliance with the HDS regulatory framework.
 
-### HDS Compliance Requirements
+### HDS compliance requirements
 
 When storing healthcare data within Scaleway Storage Services, the client is responsible for:
 
@@ -287,7 +287,7 @@ When storing healthcare data within Scaleway Storage Services, the client is res
 
 Scaleway undertakes to provide HDS-certified infrastructure, and commits to maintain this certification. The loss of said certification may result in the termination of Scaleway’s commercial relationship with the HDS client. The aforementioned elements are included in the HDS contract signed by the client.
 
-### Data Residency
+### Data residency
 
 Scaleway guarantees that data remains within the authorized datacenters in Paris and does not access personal health data hosted by the client.
 
@@ -301,15 +301,15 @@ You must:
 
 You must not configure replication, snapshots, backups or transfer data to regions outside the authorized perimeter.
 
-### HDS-compliant Resources Identification
+### HDS-compliant resources identification
 
 You are responsible for:
 
 *   Knowing which Storage resources are HDS or not.
 
 *   Attaching volumes to HDS-compliant Instances only.
 
-### Block Storage Encryption and Data deletion
+### Block Storage encryption and data deletion
 
 Encryption at rest is mandatory for Volumes hosting healthcare data. Deleted data cannot be restored.  
 
@@ -325,7 +325,7 @@ Scaleway is responsible for:
 
 *   Managing the lifecycle, rotation and deletion of the disk encryption keys to access the underlying instances.
 
-### Object Storage Encryption and Data deletion
+### Object Storage encryption and data deletion
 
 Encryption at rest is mandatory for Object Storage buckets hosting healthcare data, with HDS-compliant key handling by Scaleway. Scaleway provides HDS-compatible mechanisms to encrypt data at rest and guarantee HDS-compliant data deletion.
 
@@ -347,7 +347,7 @@ When using the Object Storage service, you are required to:
 
 Scaleway must maintain technical guarantees for secure deletion of healthcare data. 
 
-### HDS-compliant Storage Classes and Prohibited Features
+### HDS-compliant storage classes and prohibited features
 
 For the Object Storage service: