5 ms·
At the time of this comment (edit: since this comment, they addressed this, check the replies), on your pricing page you have "SOC 2 Type II Security Compliance
by nickjj 3y ago
At the time of this comment (edit: since this comment, they addressed this, check the replies), on your pricing page you have "SOC 2 Type II Security Compliance" not being checked off on the free tier but it's checked in the others. The same thing applies to "HIPAA Compliant and BAA" except this isn't enabled for free and pro plans.
What makes the free tier different here? Are you storing free data in a different area with many less restrictions on who has access to it? How do I know what I upload is safe from being analyzed or sold? Are you using this data to train any data models but only in the free / pro tiers that aren't SOC 2 or HIPAA compliant?
- otterley 3y agoIME working at SaaS providers in my past, there's no practical difference in the underlying implementation; it's market segmentation. It's a great way to help SaaS providers attract more revenue. Customers who care about these compliance regimes are the target cohort and are more likely to pay for the ticked box.
- breckognize 3y agoThere's no difference in how data is stored or processed between the tiers. We updated our pricing page to address the confusion. We only provide the SOC 2 report or BAA for Business accounts.
- nickjj 3y agoThanks, I do see a difference now. Both compliance types are checked on the free tier. Can you please answer the question about how our data is viewed and or used internally?
- breckognize 3y agoWe do not use customer data. From https://rowzero.io/security https://rowzero.io/security: "Row Zero does not use customer data for any purpose."
- tptacek 3y agoGenerally: the free tier won't get you the documentation --- to get the SOC2 report or the BAA, you need a paid plan. Which makes sense as a segmentation strategy. Especially in the case of SOC2, where providers really should charge for that report.