Policies, Terms, and Privacy
What is provided?
The following Globus services are available for free from Globus, without a subscription:
Globus Connect Server, with the following limitations:
Transfer management and reports are unavailable.
Only local users may perform transfers — creating shares is disabled.
Stanford’s Globus subscription covers the following services:
Globus Connect Server, managed (which includes the unavailable features listed above)
The premium connectors for Amazon S3 (including S3-compatible storage systems), Box, Google Cloud Storage, and Google Drive. Since Wasabi speaks the S3 protocol, Wasabi is also supported.
There are no limits on the above services. You can have an unlimited number of endpoints, make as many transfers as you want, and transfer as much data as you want.
There are also some services provided by Globus, which are not currently available:
Globus Premium Storage Connectors, beyond the ones listed above.
These are add-ons that allow Globus to interact directly with non-POSIX data stores. Connectors currently exist (or are planned) for Amazon S3 (including S3-compatible storage systems), Box, Ceph RADOS, Google Cloud Storage, Google Drive, Hadoop HDFS, HGST ActiveScale, HPSS, and Spectra Logic BlackPearl.
Stanford has licensed some of these add-ons. We are looking for groups interested in helping cover the cost of licensing the remaining connectors for campus use. If your group is interested, please reach out!
Our subscription expires on May 25, 2023. Continued funding by the University will depend on us demonstrating use of, and continued need for, the service. So, please keep in touch.
Who can use it?
The free Globus services can be used by anyone. If you have a SUNetID, you should feel free to use it to access Globus services.
Our Globus subscription covers everyone who reports up to the President. The complete list is best represented by the charts contained in Admin Guide Chapter 9.
The groups excluded from Stanford’s Globus Subscription are:
Stanford Health Care.
Stanford Children’s Health.
The SLAC National Accelerator Laboratory.
SLAC’s exclusion is because, even though the SLAC Director and Vice President do report to the President and/or Provost, Stanford operates SLAC on behalf of the Department of Energy.
If you are a member of one of the above groups, we suggest leveraging any relationships you have with one of the Seven Schools. Should that fail, a separate subscription would need to be negotiated.
Finally, Globus Plus is only available to people who have a full-service (or full sponsored) SUNetID. In other words, if you have Stanford email, then you can use Globus plus! If you do not have Stanford email, ask your Stanford contact about getting a full sponsored account.
Data Collection & Privacy
By using Globus, certain data are collected by Globus and by Stanford. This section talks about data collected by Stanford; the next section talks about data collected by Globus.
Note that in this section, the word “endpoint” refers to Globus Connect Server endpoints, as well as shared endpoints hosted by Globus Connect Server endpoints, that are managed under Stanford’s Globus subscription.
When you perform any operation involving an endpoint, something may be logged. For example, activating an endpoint (or attempting to activate an endpoint) may log details of the attempt. For MyProxy and MyProxy OAuth authentications, those logs will exist on the MyProxy (or MyProxy OAuth) server. For CILogon authentications, those logs will exist with CILogon. Also, for all authentication methods, Globus will have a record of the endpoint activation, because Globus holds the credentials related to the endpoint activation.
When you perform metadata-related activities involving an endpoint (such as doing a directory listing), logs of the activity may be generated on the endpoint where the activity is taking place.
When you perform a transfer between endpoints, it is logged in three places. First, Globus keeps a log of the transfer. The log includes the identity of the person initiating the transfer; the identity of each endpoint; the date & time that the transfer started and ended; the number of files (and amount of data) involved in the transfer; the list of files and directories transferred; and the ultimate result of the transfer. Each endpoint may also log which files were transferred.
If a cloud service is involved in a transfer, logs of API calls and transfer operations may be recorded, either by the cloud service accountholder or by the cloud service itself.
Logs generated on endpoints are kept by the endpoint administrators, who should be contacted for details. Logs generated by Globus are accessed by SRCC, who uses them to gather metrics on how Globus is used at Stanford. This is mainly used for capacity planning (making sure endpoints have enough resources to keep up with data-transfer needs), and also to justify continuing to pay for the subscription.
All information logged is handled in accordance with Admin Guide Chapter 6.
Other Policies & Agreements
Only Low and Moderate Risk data may be accessed using Globus. Globus has not been evaluated for handling data rated as High Risk. As always, it is up to the data owners to determine the Risk Classification for their data.
Globus Connect Server and Globus Connect Personal services are made available to us under the Globus Terms of Service, and the Globus Customer Agreement negotiated between the University of Chicago and Stanford on March 1, 2022.
The Globus Connect Server and Globus Connect Personal software—and included components—are licensed under the terms listed on the Globus Software Agreement page.
If you use Globus to interact with Amazon S3, that access is governed by the AWS Service Terms, as modified by any agreements made between Amazon Web Services and Stanford.
If you use Globus to interact with Box, that access is governed by the Box Terms of Service, as modified by any agreements made between Box and Stanford.
If you use Globus to interact with Google Cloud Storage or Google Drive, that access is governed by the Google Cloud Platform Terms of Service or the Google Drive Additional Terms of Service, respectively, as modified by any agreements made between Google and Stanford.
If you use Globus to interact with Wasabi, that access is governed by the terms on the Wasabi Legal page, as modified by any agreements made between Wasabi Technologies and Stanford.