Hubs-Foundation / hubs-cloud

Resources for self hosted Hubs Cloud instances
Mozilla Public License 2.0
151 stars 90 forks source link

[Feature Request] Cloud vendor Assessments/Certifications for the Mozilla Hubs Cloud services. #222

Open matthewbcool opened 2 years ago

matthewbcool commented 2 years ago

Some organizations require/prefer specific certifications and proof of accessibility/security standards in order to use hubs cloud. e.g: SOC 2 Type 2 Cloud Security Alliance Star Form (CSA-STAR) Educause Higher Education Cloud Vendor Assessment Tool (HECVAT) VPAT (Voluntary Product Accessibility Template)

Organizations seek to easily understand questions like: "What type of access, if any, does Mozilla have to our Hubs Cloud Enterprise instance, as well as our data?" and "What types of data does Hubs Cloud Enterprise store on AWS? Logs? Audio? Chat Transcripts? Etc."

Currently, it is not easy to discern the answers to these questions as a hubs-cloud user via the privacy policy for hubs.mozilla https://www.mozilla.org/en-US/privacy/hubs/ and https://d7umqicpi7263.cloudfront.net/eula/product/94ec4ef1-285d-4e63-b2eb-0b65ea93b942/ca2dfd6f-71e9-4e35-96ba-0204991999ff.pdf

Providing certs and records of these assessments would make it easier for folks in these organizations to adopt hubs-cloud for their own internal use.