My open question to you both and others is this: In your view, is that "organizational compliance with minimal logging" use case substantial enough to warrant a

My open question to you both and others is this: In your view, is that "organizational compliance with minimal logging" use case substantial enough to warrant a new, standardized protocol? Or is it adequately served by either a) mandating HIBP's API, or b) telling companies to download and manage the full HIBP dataset locally? What's the approach from a consumer standpoint?