postmanlabs / postman-app-support

Postman is an API platform for building and using APIs. Postman simplifies each step of the API lifecycle and streamlines collaboration so you can create better APIs—faster.
https://www.postman.com
5.86k stars 841 forks source link

Postman HIPAA Compliance #8104

Open ColdCerealAtWork opened 4 years ago

ColdCerealAtWork commented 4 years ago

Is your feature request related to a problem? Please describe. Working at a company that has to deal with PII/PHI and be HIPPA complaint, we take security extremely seriously. We cannot take risks on data leaks.

Describe the solution you'd like If we had an On-Prem offering, it would be a lot easier to sell postman enterprise to the organization.

chrisdeso commented 4 years ago

Hey @KristianAtVsp – it looks like we've had a few similar requests closed out on this repo

As far as I know, nothing has changed on the on-premise front for us but we do know dealing with PII/PHI and HIPAA is no small feat.

I'd be happy to connect you with folks on our end who have worked with organizations that have similar constraints to see if there's anything we can do to help on selling our platform internally.

ColdCerealAtWork commented 4 years ago

Hey @KristianAtVsp – it looks like we've had a few similar requests closed out on this repo

  • 7804

  • 5020

As far as I know, nothing has changed on the on-premise front for us but we do know dealing with PII/PHI and HIPAA is no small feat.

I'd be happy to connect you with folks on our end who have worked with organizations that have similar constraints to see if there's anything we can do to help on selling our platform internally.

Sure. I started a thread on the community forum. They can contact me there. https://community.postman.com/t/hippa-compliance/11011

ColdCerealAtWork commented 4 years ago

There is growing concern from our security department of the inability to control how Postman is used within our organization. An On Prem alternative would solve all of our problems, and make a subscription to Postman Enterprise a no brainer. Has there been any further consideration on developing this feature?