[{"data":1,"prerenderedAt":223},["ShallowReactive",2],{"project-20238740":3},{"id":4,"name":5,"line":6,"line_source":7,"title":8,"url":9,"domain":9,"maker":10,"posted_at":11,"year":12,"points":13,"comments":14,"rank_in_year":15,"shown_in_year":16,"top":17,"tier":18,"category":19,"subcategory":20,"format":21,"keywords":22,"reception":27,"sentiment":28,"stance_mix":29,"scored_comments":33,"aspects":34,"strip":40,"post_text":42,"what":43,"said":62,"maker_in_thread":135,"shape":146,"grid":150,"attempts":184,"same_week":185,"maker_shows":41,"maker_hidden":214,"reader_version":215,"card":216},"20238740","Very Good Security Netlify add-on","Instantly make any Netlify form PCI DSS compliant","title","Show HN: Instantly make any Netlify form PCI DSS compliant",null,"mahmoudimus",1561075922,2019,59,17,737,2195,34,"notable","web_saas","form data security add-on","web_app",[23,24,25,26],"pci dss","netlify forms","tokenization","gdpr compliance","debated",-0.174,{"positive":30,"neutral":31,"mixed":32,"critical":30},4,3,0,11,{"idea":35,"docs":37,"privacy":38},{"positive":36,"critical":32},2,{"positive":32,"critical":31},{"positive":32,"critical":39},1,[41,39,32,39,31,32,31,32,41,31,32,41,39,32,39,32,41],5,"We are big fans of Netlify [1] (it powers our website and blog!) and we wanted to scratch our own itch to comply with GDPR, as well as various upcoming data security regulations [3]. So we, Very Good Security [2], just released an add-on that lets you securely collect sensitive data (e.g. payments, PII, SSNs, identification, etc.) via web forms on Netlify.\n\nWith the new add-on, Netlify customers are shielded from data liability, breach risk and the compliance issues that come with holding sensitive data. So you can inherit PCI compliance from VGS (a level 1 service provider) and can fast-track",{"problem":44,"audience":50,"pricing":9,"motivation":54,"time_to_build":9,"stack":58,"openness":59,"stage":60,"team_size":61},{"value":45,"source":46,"evidence":47},"Netlify forms can't safely collect sensitive data, creating compliance and breach liability","maker",[48],{"id":49},"post",{"value":51,"source":46,"evidence":52},"Netlify customers collecting payments, PII or SSNs via web forms",[53],{"id":49},{"value":55,"source":46,"evidence":56},"The team wanted GDPR compliance for their own Netlify-hosted site",[57],{"id":49},[],"unknown","launched","company",{"praise":63,"objections":79,"requests":109,"questions":117,"alternatives":125},[64,72],{"value":65,"source":66,"evidence":67},"Useful approach to isolate sensitive data via tokenizing proxy","commenter",[68],{"id":69,"by":70,"text":71},"20240578","ledgerdev","Very cool, will try this out! I've been doing a fairly extensive integration with their primary VGS tokenization service and it's been a solid, though young platform with a few…",{"value":73,"source":66,"evidence":74},"Nice work from the team",[75],{"id":76,"by":77,"text":78},"20240261","aanari","Nice work VGS team!",[80,87,102],{"value":81,"source":66,"evidence":82},"Why not use Stripe or Checkr which already keep sensitive data off servers",[83],{"id":84,"by":85,"text":86},"20239004","andrenotgiant","This is interesting, but one thing I didn't understand from the video demo (which shows a background check form and a payment form) Aren't these SaaS tools like Stripe (payments)…",{"value":88,"source":66,"evidence":89},"Docs had a typo and broken, truncated links",[90,94,98],{"id":91,"by":92,"text":93},"20239470","bks","I am not 100% but I believe that 'Sure name' should be Surname https:\u002F\u002Fwww.screencast.com\u002Ft\u002FVmRZ1dlH0T https:\u002F\u002Fen.wiktionary.org\u002Fwiki\u002Fsurname",{"id":95,"by":96,"text":97},"20238868","cdepman","This is great, thanks! The first two links are truncated and broken, however. Please update!",{"id":99,"by":100,"text":101},"20238860","WrtCdEvrydy","Interesting, blog seems broken, bad copy paste?",{"value":103,"source":66,"evidence":104},"Publishing a vault-like service's access raises privacy doubts",[105],{"id":106,"by":107,"text":108},"20240722","sagebird","If I ask someone to place a diamond in a safe at Fort Knox, and then publish the name and password to retrieve the diamond on a billboard, is the diamond safe?",[110],{"value":111,"source":66,"evidence":112},"Confirm HIPAA compliance and encryption at rest for health data",[113],{"id":114,"by":115,"text":116},"20239106","mackatsol","Is this new service HIPAA compliant as well? Can I collect patient health info, have it stored in a separate vault from all my other data.. and have it be encrypted at rest?",[118],{"value":119,"source":66,"evidence":120},"How does this differ from payment processors that already avoid storing card data",[121,122],{"id":84,"by":85,"text":86},{"id":123,"by":70,"text":124},"20240523","Yes they are, BUT if you use stripe(or any processor) for monthly recurring charges or tokenization, the card data is permanently locked to processor. So what happens next year…",[126,131],{"value":127,"source":66,"evidence":128},"Stripe",[129,130],{"id":84,"by":85,"text":86},{"id":123,"by":70,"text":124},{"value":132,"source":66,"evidence":133},"Checkr",[134],{"id":84,"by":85,"text":86},{"comments":41,"answered":31,"key":136},[137,140,143],{"id":138,"text":139},"20240101","Eagle eye! Well spotted. Flagged it to be fixed.",{"id":141,"text":142},"20239062","Great question. Those are examples we built that we thought would be easily relatable to show what's possible with this integration. Some services will give you the ability to…",{"id":144,"text":145},"20239117","Yes! Thanks for asking. If you have questions about a specific use case, feel free to email me (info in my profile). (disclaimer: I work for VGS)",{"commenters":147,"max_depth":30,"maker_replies":41,"first_comment_mins":148,"lifespan_hours":149},10,28,26,[151,153,155,157,159,161,162,163,167,169,171,173,175,176,178,180,182],[69,32,41,152,70,32],"project\u002Fpositive\u002Fidea",[91,39,39,154,92,32],"project\u002Fcritical\u002Fdocs",[138,39,32,156,10,39],"maker\u002Fneutral\u002Fnone",[106,36,39,158,107,32],"project\u002Fcritical\u002Fprivacy",[84,31,31,160,85,32],"project\u002Fneutral\u002Fidea",[141,31,32,152,10,39],[123,31,31,160,70,32],[164,31,32,165,166,32],"20241011","other\u002Fneutral\u002Fnone","KeithBrink",[168,31,41,152,70,32],"20247648",[114,30,31,170,115,32],"project\u002Fneutral\u002Fprivacy",[144,30,32,172,10,39],"maker\u002Fpositive\u002Fnone",[174,30,41,172,115,32],"20245855",[95,41,39,154,96,32],[177,41,32,156,10,39],"20238933",[99,179,39,154,100,32],6,[181,179,32,156,10,39],"20238928",[76,183,41,172,77,32],7,[],[186,190,195,200,205,210],{"id":187,"name":188,"points":189,"category":19},"20252097","noageismintech.com",523,{"id":191,"name":192,"points":193,"category":194},"20245913","Catj",388,"dev_tools",{"id":196,"name":197,"points":198,"category":199},"20233376","collectoral.com",143,"productivity",{"id":201,"name":202,"points":203,"category":204},"20231328","The Star Maps",138,"creative",{"id":206,"name":207,"points":208,"category":209},"20247661","Fist",124,"data",{"id":211,"name":212,"points":213,"category":204},"20267629","Ludigraphix",106,false,"v2",{"id":217,"name":5,"line":6,"ai":214,"cat":19,"year":12,"points":13,"comments":14,"rec":27,"s":218,"top":17,"kw":219,"maker":10,"domain":220,"tier":18,"attempts":32,"strip":221,"url":-1,"mix":222,"praise":65,"objection":81,"sub":20},20238740,-0.17,[23,24,25,26],"","51013030530510105",[30,31,32,30],1794036578539]