selinkocalar

9 ms·

1. 91.▲
   by selinkocalar 3y ago

   Yes, you’re correct in your assertion that infrastructure policies are just one part of the puzzle. In conjunction with our preconfigured deployments, we provide customers a set of legal policies we’ve worked with former US Attorneys to clo
2. 92.▲
   by selinkocalar 3y ago

   You’re correct, we are putting our engineering focus into designing an enjoyable experience with AWS as our launch pad, and broadening our supported cloud providers as we continue to build out. I’ve only seen and personally used CPanel for
3. 93.▲
   by selinkocalar 3y ago

   It's slightly similar but HITRUST is still more comprehensive and is built on the CSF framework. HITRUST was initially developed as the answer to HIPAA compliance, although the framework has now been rebranded as industry-agnostic. Hen
4. 94.▲
   by selinkocalar 3y ago

   A lot of healthcare companies are wanting to use GPT4, Whisper, and other LLMs from OpenAI, but these aren't HIPAA compliant out of the box. You still have to sign a BAA with OpenAI and get on their zero data retention (ZDR) plan. Beca
5. 95.▲
   by selinkocalar 3y ago

   Thanks for the question! 1) We’ve made the conscious decision to start with AWS support, as our ICP is primarily on AWS (80%+). We plan to roll out GCP and Azure once we have sufficient coverage on AWS services. (2) When you’re onboarded, w
6. 96.▲
   by selinkocalar 3y ago

   Your PM was probably referencing the fact there is no audit requirement — HIPAA is self attestation. HIPAA compliance can be boiled down to “implement best security practices, record every request & transaction, and enforce zero trust t
7. 97.▲
   by selinkocalar 3y ago

   We currently support AWS but use terraform for deployment, which is pretty cloud agnostic. So far, we haven't gotten any major requests for expanding to other cloud providers and most of our incoming customers are already on AWS anyway
8. 98.▲
   by selinkocalar 3y ago

   Yes! HIPAA was initially rolled out for the portability and continuity of health insurance coverage. But over the years, with the enactment of the Privacy Rule, Security Rule, HITECH Act, Omnibus Rule, etc., HIPAA's implications have b
9. 99.▲
   by selinkocalar 3y ago

   Yes, we sign sub-BAAs with our customers.
10. 100.▲
    by selinkocalar 3y ago

    Thanks for sharing this! The demo is very neat and it's great to see other companies also prioritizing security and compliance.
11. 101.▲
    by selinkocalar 3y ago

    We charge a fixed annual fee — zero usage-based costs. We deploy all on your own AWS cloud so you're not paying any marked up fees or being faced with surprise bills. If you have any thoughts on this would love to hear them!
12. 102.▲
    by selinkocalar 3y ago

    We're rolling out SOC2 in a month! GDPR, HITRUST, etc. are down the line.
13. 103.▲
    by selinkocalar 3y ago

    Thanks for the transparency and thoughts on this! We provide a lot of active elements, such as our infrastructure logging/monitoring dashboard, email alerts, and code vulnerability scans every time you git push, so that we aren't
14. 104.▲
    by selinkocalar 3y ago

    Yes! We outline BAA requirements in our compliance checklist (i.e. we'll provide the exact steps of how to get a BAA with AWS and remind you to get BAAs with other 3rd parties). We're also building out a small network of 3rd party
15. 105.▲
    by selinkocalar 3y ago

    Great question! Aptible is great for deploying HIPAA-compliant applications, but you still have to purchase another solution for completing the legal policies and compliance checklist, such as Vanta. Think of us like Aptible + Vanta. Becaus
16. 106.▲
    Launch HN: Delve (YC W24) – HIPAA compliance as a service

    111 points by selinkocalar 3y ago|111 comments