4 ms·

Boost is 100% confidential. People talk about complex power grabs and political situations all the time. For Boost to work well, people need to be able to trust

Boost is 100% confidential. People talk about complex power grabs and political situations all the time. For Boost to work well, people need to be able to trust it with Information thy want confidential.

patch_cable 9y ago
Talking about complex power grabs and political situation is a bit different than encouraging employees to upload confidential information, which is what I think tIONTamINariciA. Would you consider adding anything to the UI to discourage your users from those potential lapses in judgement? And if not, what do you do to protect the sensitive information you may find in your hands?
- ztratar 9y ago
  So far we haven't had anyone give us any information that's super juicy, so we're not worried about a built-in UI to discourage it yet. Once we can expand the team further, hiring a full-time security engineering staff will be a priority. As of now, we have the basics down... full E2E encryption, security access privs, etc.
posixplz 9y ago
> 100% confidential Are your coaches licensed professional counselors, therapists or psychologists? If not, those conversations are not actually privileged; any disclosure of legally protected information (like a company's sensitive internal documents) would be highly improper.
- satysin 9y ago
  This is the first thing that popped into my mind also. Also what about legal blowback if they give really bad advice?
- ztratar 9y ago
  We're thinking about putting in an NDA-like process that's more formal. People should feel secure that we have their back. Interestingly enough, "licensed career coaching" is a complete sham. There's no real accreditation or regulatory environment: the largest career coaching programs that bestow certificates are private, for-profit orgs and give out their certs like candy on halloween. It's really sad. I agree that there's a large amount of information that probably shouldn't be sent to us, but people also need to give us the full context for their personal problem. We don't encourage people to send us information we don't need, and often they can get by with indirect info... "we're raising $8.6m on a $100m valuation" -> "I think we're going through additional funding soon."
  - posixplz 9y ago
    https://en.wikipedia.org/wiki/Licensed_professional_counselor https://en.wikipedia.org/wiki/Licensed_professional_counselo... It's not called a 'licensed career coach' -- privilege, in this case, is a legal protection that is not afforded to the type of relationships you're talking about. You're putting yourself, and your clients, in a very legally tenuous position.

patch_cable 9y ago

Talking about complex power grabs and political situation is a bit different than encouraging employees to upload confidential information, which is what I think tIONTamINariciA. Would you consider adding anything to the UI to discourage your users from those potential lapses in judgement? And if not, what do you do to protect the sensitive information you may find in your hands?

ztratar 9y ago
So far we haven't had anyone give us any information that's super juicy, so we're not worried about a built-in UI to discourage it yet. Once we can expand the team further, hiring a full-time security engineering staff will be a priority. As of now, we have the basics down... full E2E encryption, security access privs, etc.

posixplz 9y ago

> 100% confidential Are your coaches licensed professional counselors, therapists or psychologists? If not, those conversations are not actually privileged; any disclosure of legally protected information (like a company's sensitive internal documents) would be highly improper.

satysin 9y ago
This is the first thing that popped into my mind also. Also what about legal blowback if they give really bad advice?
ztratar 9y ago
We're thinking about putting in an NDA-like process that's more formal. People should feel secure that we have their back. Interestingly enough, "licensed career coaching" is a complete sham. There's no real accreditation or regulatory environment: the largest career coaching programs that bestow certificates are private, for-profit orgs and give out their certs like candy on halloween. It's really sad. I agree that there's a large amount of information that probably shouldn't be sent to us, but people also need to give us the full context for their personal problem. We don't encourage people to send us information we don't need, and often they can get by with indirect info... "we're raising $8.6m on a $100m valuation" -> "I think we're going through additional funding soon."
- posixplz 9y ago
  https://en.wikipedia.org/wiki/Licensed_professional_counselor https://en.wikipedia.org/wiki/Licensed_professional_counselo... It's not called a 'licensed career coach' -- privilege, in this case, is a legal protection that is not afforded to the type of relationships you're talking about. You're putting yourself, and your clients, in a very legally tenuous position.