Hacker News new | ask | show | jobs
by al2o3cr 1739 days ago

    the data can't be shared on a database with other customers
FWIW, this is pretty standard boilerplate security language in a lot of domains (it was in healthcare, for sure) - but it's not always a hard requirement.

Dig into their threat model: exactly how much separation do they really need? Partitioning the data into a different DB at rest doesn't mean much if your admin APIs can access both DBs.

1 comments

You can confirm this.

It’s a standard request for our big clients. Everyone wants single tenancy.

We don’t offer it to anyone at all.

We still service many of the biggest players in our industry.

Edit: I should say, some things are separate for everyone. Most things are shared resources and we don’t bend on that. It’s relevant to our ability to scale with no real notice.