3 ms·

well, I am not really interested in your convox-ads but more in your claim that it somehow makes the typical docker-workflow of running random-software from the

by fock 6y ago

well, I am not really interested in your convox-ads but more in your claim that it somehow makes the typical docker-workflow of running random-software from the net somehow HIPPA and PCI-compliant? That's an interesting claim, especially with your description of it as zero-effort.

nathan_f77 6y ago
No, Convox doesn't automatically make any application compliant. Convox makes it far easier to achieve HIPAA/PCI compliance by easily setting up compliant server infrastructure: https://docsv2.convox.com/reference/hipaa-compliance https://docsv2.convox.com/reference/hipaa-compliance Note that dedicated instances are no longer required for HIPAA compliance [1]. Also note that the private Convox console is completely optional. You can achieve all of this with the free and open source convox/rack project: https://github.com/convox/rack https://github.com/convox/rack As I mentioned in my original comment, you still need to do a lot of work to set up company policies and make sure your application complies with all regulations. You should also be aware that I'm comparing Convox with some other popular options for HIPAA-compliant hosting: * Aptible: https://www.aptible.com https://www.aptible.com (Starts at $999 per month) * Datica: https://datica.com https://datica.com (I think it starts around $2,000 per month, but not 100% sure) These companies do provide some additional security and auditing features, but I think there's no reason to spend thousands of dollars per month when Convox can get you 95% of the way in your own AWS account. PLUS: If you have any free AWS credits from a startup program, you might not need to pay any hosting bills for years. [1] https://aws.amazon.com/blogs/security/aws-hipaa-program-update-dedicated-instances-and-hosts-are-no-longer-required/ https://aws.amazon.com/blogs/security/aws-hipaa-program-upda...

by fock 6y ago

nathan_f77 6y ago

No, Convox doesn't automatically make any application compliant. Convox makes it far easier to achieve HIPAA/PCI compliance by easily setting up compliant server infrastructure: https://docsv2.convox.com/reference/hipaa-compliance https://docsv2.convox.com/reference/hipaa-compliance Note that dedicated instances are no longer required for HIPAA compliance [1]. Also note that the private Convox console is completely optional. You can achieve all of this with the free and open source convox/rack project: https://github.com/convox/rack https://github.com/convox/rack As I mentioned in my original comment, you still need to do a lot of work to set up company policies and make sure your application complies with all regulations. You should also be aware that I'm comparing Convox with some other popular options for HIPAA-compliant hosting: * Aptible: https://www.aptible.com https://www.aptible.com (Starts at $999 per month) * Datica: https://datica.com https://datica.com (I think it starts around $2,000 per month, but not 100% sure) These companies do provide some additional security and auditing features, but I think there's no reason to spend thousands of dollars per month when Convox can get you 95% of the way in your own AWS account. PLUS: If you have any free AWS credits from a startup program, you might not need to pay any hosting bills for years. [1] https://aws.amazon.com/blogs/security/aws-hipaa-program-update-dedicated-instances-and-hosts-are-no-longer-required/ https://aws.amazon.com/blogs/security/aws-hipaa-program-upda...