News for hackers. Stuff that matters.
Re:Moving from Heroku to Google Kubernetes Engine by shay_ker on Friday April 05, 2019 @04:23PM (#19586646)
> ~600%, compared to zero for GCP

I've always been curious. What do you need to do to be HIPAA compliant, from a technology standpoint? I figured it's similar to PCI compliance, but I'm not sure.

From what I've heard, though, the cost isn't quite zero, it's just that you have to own & implement all the work to be HIPAA compliant. But perhaps it's not that bad?

Re:Moving from Heroku to Google Kubernetes Engine by holografix on Saturday April 06, 2019 @07:29AM (#19590274)
I’m not in product or legal so take this with a grain of salt:

I know that for a customer I spoke to, keystroke logging on running dynos was something they were really interested in, from a compliance point of view.

I think being able to spin up Postgres DBs with rollbacks, fork and follow, HA etc etc (don’t want to sound like a sales rep) in this highly compliant environment also involves some serious infra wrangling.