Doing the Lord’s work in the Devil’s basement

  • 0 Posts
  • 12 Comments
Joined 1 year ago
cake
Cake day: May 8th, 2024

help-circle


  • Vendors do exist but they are not required to do so. My last job was at a software vendor, GDPR compliant, ISO & SOC 2 certified, controlling personal data (including salary information) of EU citizens who were not opted in (their employer is the one on the contract). Not healthcare levels of sensitive but still pretty icky in terms of EU law and we had tons of German friends who are real sticklers for the rules. We stored everything on AWS infrastructure and it has never caused any issue during certification or security assessment by clients.





  • I think a company in Europe doesn’t give a shit that the US government can peek at their data. Their users might care but they certainly don’t.

    What’s new is that they no longer trust the stability of the services long term. What if trump slaps a tariff, or asks Amazon to shut down access, or whatever bullshit passes through his head daily? You wouldn’t store your business on Russian servers, and they’re starting to realize the same applies to the US.