I think it took longer for you to write that post than to just do the search.

https://www.zoho.com/crm/hipaa/

https://www.zoho.com/gdpr.html

https://www.zoho.com/know-your-datacenter.html

On the flip side I have known of Zoho for at least a decade, they are not a new player..I never realized they were an Indian company.

Good catch, I did a search but none of these were in the top results for me (I guess that's the state of search these days).

My main point however was that India doesn't have an agreement with the EU regarding the transfer and protection of personal data (e.g. the EU-US Privacy Shield and related). So while the links above state how much Zoho cares about privacy, the platform is not suitable for use-cases including personal information.

No problems. They were at the top of my search for both google and kagi.

Thank you, I looked at Zoho a number of years ago and when I reached out to their team they did not recommend using them for HIPAA related transactions. I'm happy to see that change!

> but one would hate to expose one’s users to a company based in some strange dictatorship of a country.

And how much would one hate to expose said data to this?

https://www.theguardian.com/us-news/2024/apr/16/house-fisa-g...

https://www.nytimes.com/2024/04/20/us/politics/senate-passes...

https://www.nytimes.com/2024/04/12/us/politics/surveillance-...

https://www.npr.org/2024/04/20/1246076114/senate-passes-reau...