3 ms·
A previous company did. Reliability seemed fine; it was a way to ensure no PHI/PII was accidentally sent to a 3rd party as part of an error report.
by endemic 4y ago
A previous company did. Reliability seemed fine; it was a way to ensure no PHI/PII was accidentally sent to a 3rd party as part of an error report.
- metafunctor 4y agoNot just PII, but access tokens to 3rd party systems in case of integrations and whatnot. A Sentry data leak could include valid access tokens to, say, all data on a customer's Docusign account. We try to make sure data like that is scrubbed before sending to Sentry… but mistakes can happen. This is simply not a risk we are willing to take. Thus, we self-host Sentry in our own secure infrastructure (we are a SaaS provider ourselves), and accept all the maintenance burden that it entails.