3 ms·

G-Suite is a super interesting case in that you literally cannot use the product without handing over your data to Google. It certainly seems like companies wo

G-Suite is a super interesting case in that you literally cannot use the product without handing over your data to Google. It certainly seems like companies would hate that, particularly those with data protection obligations. Google does theoretically require a Business Associate Agreement (BAA) if your use case is subject to HIPAA and you intend to store or transmit PHI using their services, but I don't know how they detect or enforce that. [1] --- [1]: https://support.google.com/a/answer/3407054?hl=en https://support.google.com/a/answer/3407054?hl=en

judge2020 4y ago
Since when does complying with data protection mean "you must own your entire tech stack and run it on prem"? Google[0] states that they don't use your data for anything more than running the service, and there are multiple pages detailing how they secure data on their servers from both employees[1] and attackers[the rest of the document]. 0: https://workspace.google.com/learn-more/security/security-whitepaper/page-6.html https://workspace.google.com/learn-more/security/security-wh... 1: https://workspace.google.com/learn-more/security/security-whitepaper/page-7.html https://workspace.google.com/learn-more/security/security-wh...