https://percussiverepair.net/tags/compliance/Recent content in Compliance on PercussiveRepair.netHugoen-GBMon, 20 Nov 2023 00:00:00 +0000https://percussiverepair.net/posts/2023-11-20-building-a-platform-we-couldnt-run/Mon, 20 Nov 2023 00:00:00 +0000https://percussiverepair.net/posts/2023-11-20-building-a-platform-we-couldnt-run/<p>Over the last few years a good chunk of my time at Okta has gone on compliance: PCI, GDPR and HIPAA, and then the US government programmes, FedRAMP Moderate, FedRAMP High and DoD IL4.</p> <p>The lower levels are mostly about showing you do what you say you do. The higher levels also restrict who is allowed to do it. For the most sensitive environments, anyone operating the platform had to be a US citizen working on US soil.</p>