Acceptable Use Policy version 0.2


SURF Research Cloud, SRC, is a service with which researchers and research supporters can deploy and manage workspaces on multiple cloud infrastructures.

By logging on to SRC, you become a User and agree to the terms and conditions below.

1 - Concepts and definitions

In these terms and conditions of use, capitalized terms have been written, these terms have the definitions set out below.




Collaborative Organization. An entity defined in SRAM that falls under an Organization (which usually concerns a Institution), in principle represents a research collaboration, and may have CO-admins, members and associated Research Services.


A natural person who has created an account on SRC


Organizations that are members of the SURF cooperative or other Dutch organizations associated with research


SURF Research Access Management


SURF Research Cloud


Acceptable Use Policy

Research Services

Services intended for researchers that are offered by a service provider via SRAM. For instance SRC

Personal Data

Data like name, telephone number, e-mail address. See for a full specification the definitions on

2 - Rules of use SRC

  1. The login details, which give the User access to SRC, are strictly personal. The User may not transfer or disclose these login details and the resulting rights to access SRC to a third party or allow them to be used by a third party, and is assumed to take reasonable efforts to keep the login details secure.

  2. The User shall refrain from unauthorized use. This is understood to mean:

    • Using credentials from a third party to log on to SRC;

    • Using SRC in such a way as to infringe the intellectual property rights of the holder of SRC or to contravene the law, public order and morality.

    • Using the information and/or data within SRC in such a way that it violates the intellectual property rights of third parties or violates the law, public order and decency.

    • Within or with SRC (attempting to) gain access to information or Research Services which the User knows or can reasonably know is not intended to gain access to.

  3. If SURF has reason to believe that the User is infringing, or threatens to infringe, rules or obligations as described above, the User will be denied access to (part of) SRC and the associated Research Services.

  4. SURF also has the right to take other measures necessary to protect SURF, other Users and/or third parties against damage, nuisance or infringements of rights.

  5. SURF is not liable for any damage suffered by the User or a third party as a result of closing the account and denying access pursuant to paragraphs 3 and 4.

3 - Rules for offering SRC

SRC is based on modern container technology which enables it to be highly available. SRC updates can be deployed with non to minimal downtime for the User. If planned maintenance requires more than 15 minutes downtime we will strive to inform users two weeks in advance. However SURF may still (temporarily) decommission SRC or restrict its use to the extent necessary for the necessary maintenance or for adjustments and/or improvements to SRC to be carried out by SURF without prior notice. SURF will not be liable for any damage resulting from the (temporary) unavailability of SRC.

This AUP applies only to the SRC service and SURF HPC cloud service and not to resources provided by the other cloud providers where the workspaces are provisioned. Each public cloud provider tends to have a separate AUP.

4 - Personal data and privacy

SURF processes Personal Data of the Users. SURF processes this Personal Data in accordance with the General Data Protection Regulation and other relevant legislation and regulations. SRC is a Research Service which makes use of the SRAM infrastructure to store relevant user data. For more information on the processing of this Personal Data, please refer to the privacy statement of SRAM on SURF passes on the Personal Data to, among others, (SRAM COs of) organizations (such as Institutions) in order to enable access to a CO. Processing of that information by a CO as well as deciding to what Research Services the CO passes Personal Data of CO members is the responsibility of the Institution that created the CO.

5 - Intellectual property rights

All (intellectual) property rights to SRC are and remain vested in the entitled party. If and to the extent necessary, a right of use will be granted to User for the use of SRC.

All (intellectual) property rights to data within the CO - including any copyright and database right - remain at all times vested in the rightful claimant or its respective licensor(s).

6 - Budget and excess usage

Any use of storage or compute resources on SRC must be funded. Funding is provided by paid RCCS contracts with SURF or by NWO grants.

In SRC, “wallets” represent the budget that is assigned to a User to enable them to work with storage and compute resources.

The user can at any time turn to the SRC portal to check the state of their wallets.

The user will be notified by e-mail when 80% or 100% of their wallet is spent.

To avoid excess usage, SRC will pause compute resources if the wallet is depleted. Eventually, compute and storage resources will be removed. 

7 - Support and questions

In the event of problems with SRC, Users can contact Support. Find details about our helpdesk here:

Support is available Monday to Friday from 9:00 until 17:00:

Telephone: 020 800 14 00



8 - Miscellaneous

These terms and conditions are governed by Dutch law and the competent court is the District Court of Midden-Nederland and Noord-Nederland, with the location Utrecht or Amsterdam respectively.

Insofar as the User has not already agreed to these terms and conditions at an earlier stage, by using SRC the User agrees to the above terms and conditions.

Effective date

This policy is effective from October 23rd 2023 onward until it is replaced by a newer version.

It replaces the policy of version 0.1 from January 1st 2021.