3 ms·
Do you choose the product with no references/used by over that? If you're in an organization with any type of compliance needs (SOC 2), that "used by" signals
by SkyPuncher 4y ago
Do you choose the product with no references/used by over that?
If you're in an organization with any type of compliance needs (SOC 2), that "used by" signals that the business is organized enough to pass security/audit requirements by that company. While it may be a single team using the product, they're still held to wider organizational standards.
- danielvaughn 4y agoIt's not that I'd choose a product specifically because it doesn't have references/used-by, but it's more that I get annoyed at vague allusions to usage by larger companies. If the company in question actually uses your product, great! Tell me about it! But there's no legal guarantee that a "used by" statement is true - it's like saying "9/10 doctors trust this medicine I'm selling you". It just rubs me the wrong way. In your example, it's actually worse than annoying. If you're basing SOC2 compliant requirements on a "used by" signal, then the misdirection is potentially catastrophic.
- SkyPuncher 4y ago> If you're basing SOC2 compliant requirements on a "used by" signal, then the misdirection is potentially catastrophic. I'm absolutely not basing it only on that, but it is an early signal. There are likely many options for any specific tool. "Used by" can help me differentiate between the side-project and the meaningful company before I go too far down the rabbit hole.