Hacker News Reader

Ah, unfortunately there isn't. We're 100% cloud hosted - though we call ourselves a Hybrid cloud solution because through our reverse SSH tunnel connections (where your servers SSH into ours) we also work well with on-prem data.

If security is your main reason for wanting self-hosting you may be interested to know we're also SOC2, HIPAA, and GDPR compliant.

View on HN

That's great you're compliant with those! For HIPAA, do you enter into a BAA with prospective customers who deal in HIPAA data (PHI)?

EDIT>> The implication being that you may not be HIPAA compliant if you don't enter into a BAA. IANAL, so I defer to the experts, but I figured I'd ask the original question anyway. If you are above board on all of this, I will definitely take this tool to my boss.

yep, Chartio does enter BAAs with customers to deal with HIPAA data! I worked with several healthcare customers and lawyers here to make that happen. Happy to connect and share more.

Awesome, thanks for the info! I will gladly forward this up the chain to my boss, the first chance I get. I think this tool would be great for us, just had to be certain about that. I would love a self-hosting option, but I understand that your core business model might not allow for such an option.

Reply on news.ycombinator.com