Hacker News new | ask | show | jobs
by Terretta 2100 days ago
How are you addressing business data compliance?

A kanban central like this essentially contains a snapshot of the company and its direction, “outside”.

RBAC w/ segregation of duties on the admin side and least privilege assurances, audit trails, SOC2, HIPAA, etc. etc... ?

1 comments

Hey Terretta, great question. Tables is already built on standard Google infrastructure so we have many of the default security and privacy protections built in.

From a user-facing standpoint: Tables is really geared towards being more user-friendly than the traditional DBA type tools, so the sharing model aligns more closely with Google Drive, and offer similar permissioning roles like "Editor", "Commenter", and an additional "Writer" role for collaborators who should be able to edit the rows, but not the table schema itself. We also have table and row-level change history baked in, and while we don't specifically offer an audit trail within the app, users can implement a version of that themselves using our bots. We're also working to support the ability to use bots to essentially automate GDPR compliance, by having bots that will automatically delete table rows that are >X days old.

From a customer-to-Google standpoint: we are very serious about your data privacy and security. We're not currently rubberstamped for HIPAA/SOC2, but we're already in the process of going through the internal reviews for FEDRAMP and HIPAA compliance. We do not at this time have advanced enterprise admin controls for customers, but it's absolutely coming in the future (we are only 1-day old to the public :).

We're not going to have all the angles covered, but we're working towards it!