Google says: To comply with European laws you need self-hosted GDC, not GCP

cloud.google.com

5 pointsopenplatypus4 comments

In a recent announcement, Google admitted:

> Google designed GDC Hosted to meet the most stringent accreditation requirements, including: NIST SP 800-53-FedRAMP High security controls, ICD 503/703, FedRAMP+ for IL6 authorization, and FIPS140-2L3, as well as a range of European requirements–both existing and emerging–with the evolution of the EU Open Strategic Autonomy initiative.

Meaning that anything they published so far, about GCP being GDPR-compliant, was of questionable value.

If it costs $300,000/month just to deploy an evaluation rack why can't I just make life easy for my developers and ops people and put in a rack of my own servers?

I worked with a consultancy that was renting these yellow Google search appliances in ~2009. Google discontinued them shortly after, in true Google fashion.

Beyond marketing from being affiliated with Google, the hosted GDC brings little value, it appears.

Moreover, going with GDC feels like a huge business continuity risk.

I worked someplace where we were seriously considering getting one of those yellow things and we dodged a bullet by not doing it.

Reply on news.ycombinator.com