Hacker News Reader

Actually, AWS offers a government-targeted region specifically to address data escape concerns [0]. Not classified-secure, but fine for ITAR stuff. Definitely not something I expected to exist.

[0] http://docs.aws.amazon.com/govcloud-us/latest/UserGuide/what...

View on HN

Their offerings are certainly impressive when you (or your leadership) are willing to look. Most of their flagship offerings are also HIPAA certified (or can be upgraded to such).

HIPAA certification isn't legally meaningful (once the government actually publishes it's certification requirement and standards, certification to those standards will be legally meaningful, and one hopes also substantive; right now it's just throw some money at some firm whose entire business model is issuing legally-meaningless certifications that the buyer can use in promotion.)

The legally-meaningful thing is that they are willing to sign a HIPAA BAA and accept responsibility, not certification.

Reply on news.ycombinator.com