4 ms·
One thing that Azure has really done a good job at is compliance. According to their latest report there are 13 services that aren't HIPAA-compliant, where most
by twunde 8y ago
One thing that Azure has really done a good job at is compliance. According to their latest report there are 13 services that aren't HIPAA-compliant, where most of their services are. Compared to Google or AWS that's a major jump in what's usable for companies with compliance needs. That plus their aggression in converting on-prem customers to the cloud (last I heard they were buying up datacenters) has helped them become #2 in the cloud space
- briffle 8y agoI'm having a hard time finding something in Google cloud that is NOT covered by their BAA: https://cloud.google.com/security/compliance/hipaa/#covered-products https://cloud.google.com/security/compliance/hipaa/#covered-...
- twunde 8y agoThat lists 38 hipaa-compliant services. Azure's is close to 80ish hipaa-compliant services. AWS' list is fairly large too. I haven't used GCE in a long time, so maybe GCE just has that many fewer products/services.
- vel0city 8y agoOne big selling point of GCP vs other cloud providers in regards to HIPAA is that pretty much all of GCP is covered, and probably will in the future: "GCP’s security practices allow us to have a HIPAA BAA covering GCP’s entire infrastructure, not a set aside portion of our cloud. As a result, you are not restricted to a specific region which has scalability, operational and architectural benefits. You can also benefit from multi-regional service redundancy as well as the ability to use Preemptible VMs to reduce costs. The security and compliance measures that allow us to support HIPAA compliance are deeply ingrained in our infrastructure, security design, and products. As such, we can offer HIPAA regulated customers the same products at the same pricing that is available to all customers, including sustained use discounts. Other public clouds charge more money for their HIPAA cloud, we do not." https://cloud.google.com/security/compliance/hipaa/#covered-products https://cloud.google.com/security/compliance/hipaa/#covered-... Its been about a year since I last checked out everything you need to be HIPAA compliant to run AWS services, but IIRC it required running dedicated instances for nearly everything. That can make running on AWS way more expensive. EDIT: Apparently the limitation of dedicated instances was removed in May 2017. https://aws.amazon.com/compliance/hipaa-compliance/ https://aws.amazon.com/compliance/hipaa-compliance/
- twunde 8y agoThat's great to know about GCE. It makes moving there actually a possibility
- somethingwitty1 8y agoAWS has a bunch of services that are HIPAA-compliant: https://aws.amazon.com/compliance/hipaa-eligible-services-reference/ https://aws.amazon.com/compliance/hipaa-eligible-services-re...
- twunde 8y agoAWS has a large number of things that aren't HIPAA-compliant as well including Elasticsearch. They've made significant progress over the past two years to make most services HIPAA-compliant