Re:We use our own hardware at Fastmail
by wutwutwat on Sunday December 22, 2024 @09:48PM
(#42491271)
A datacenter being soc2 compliant doesn’t mean any of your systems are. Same with pci. Same with hipaa. Cloud providers usually have offerings that help meet those requirements as well, but again, you can host bare metal, colo, cloud, or a tower under your bed, their compliance doesn’t do anything to cover your compliance.
Yes, quite right, that’s what I meant with my “I still have to do the work of securing my services”.
Would be the same no matter where I’m hosted.
Going to guess you meant to reply to the parent though?
Re:We use our own hardware at Fastmail
by bigfatkitten on Sunday December 29, 2024 @11:33PM
(#42546504)
They do cover your physical security requirements, which is still important.
Of course, their SOC 2 compliance doesn't mean we are absolved of securing our databases and services.
Theres a big gap between throwing some compute in a closet and having someone “run the closet” for you.
There is, a significantly larger gap between having someone “run the closet” and building your own datacenter from scratch.