HNHacker News
TopNewBestAskShowJobs

trey_swann

424 karma · joined February 9, 2013

VP Sales at Aerotas.com, previously at Connectifier (Acquired by LinkedIn Feb' 16), and co-founder of TrueVault (YC W14). UCLA, Y Combinator alum.

http://www.linkedin.com/in/treyswann

submissionscomments
trey_swann··on Jeff Lawson of Twilio: When Ideas Collide, Don’t Duck
"Every industry will become a software industry because of the pace at which software people innovate...Think about Tesla. It’s a rolling piece of software."
trey_swann··on Show HN: Baby steps towards real-time patient monitoring
Thank you!
trey_swann··on Show HN: Baby steps towards real-time patient monitoring
Healthcare takes place between doctor visits. And, Bellabeat seems like a great way to give pregnant women the data and feedback that they want between visits. I suspect that expecting moms will eat this up. Very cool!

Inside the Nike+ FuelBand is a triaxial accelerometer based pedometer. I can get my head around that. But, how do you track a baby's kick count?

trey_swann··on Show HN: Abacus – Killing The Expense Report
This is great! Thank you. I'm a big fan.

Can't wait for the CC feature. Awesome!

trey_swann··on Show HN: Abacus – Killing The Expense Report
Submitting expenses as they happen is great. I have literally been chased around the office by finance because of long over due expense reports.

What does your early customer look like? What size organization?

How will you get big companies with large sales teams to adopt Abacus?

Did I read in the comments that you can link to my corporate card charges? That would be ideal.

trey_swann··on Show HN: Unbabel API – Human Corrected Machine Translation
That's fantastic! Great turnaround.
trey_swann··on Show HN: Unbabel API – Human Corrected Machine Translation
Agreed.
trey_swann··on Show HN: Unbabel API – Human Corrected Machine Translation
Very cool!

Let's say I wanted to Unbabel something from German to English. How long is 'Can take some time?'

Also, how long does it take to Unbabel something given 'Regular service' conditions?

Last question, how long before 'Unbabel' catches on as a verb?

trey_swann··on Cambly (YC W14) Offers On-Demand Access To Language Tutors
Nice work Cambly! The app is very simple and well designed. Plus, I love your logo.

Immersion is clearly the way to go when learning a new language. I learned more French trying to haggle with the waiter for more ice in Biarritz, than I ever did in Madame Lefebvre’s class.

I like that Cambly pairs me with a friendly native speaker rather than a professional teacher. And, I’m a big fan of the on-demand marketplace idea.

Questions for Cambly:

1) Users are required to download a separate app for each language. As you add more languages a user may be learning French and Spanish simultaneously. Are there plans to merge everything into one app so that I can toggle between two different languages?

2) Do you find that users are selecting tutors based on attractiveness?

trey_swann··on How startups can compete with big company perks
AnyPerk.com is a great platform for providing employee perks and discounts. It works for companies of all sizes. We implemented AnyPerk at my last company when we were 52 people. And, we are implementing it at my new company that has less than 10 employees. Size doesn't matter. Great service. Highly recommend.
trey_swann··on Show HN: Kimono – Never write a web scraper again
This is a great tool! In a past life we needed a web scraper to pull single game ticket prices from NBA, MLB, and NHL team pages (e.g. http://www.nba.com/warriors/tickets/single). We needed the data. But, when you factor in dynamic pricing and frequent page changes you are left with a real headache. I wish Kimono was around when we were working on that project.

I love how you can actually use their "web scraper for anyone" on the blog post. Very cool!

trey_swann··on Ask HN: How do you manage your sales leads?
+1 Streak (http://www.streak.com)

Streak is great! We were looking for a lightweight CRM that our team would actually use. Streak does everything we need it to and it does not require our team to dramatically change their work flow.

Everything is right inside Gmail and so for us, at this stage, Streak is perfect. Plus, tracking feature is cool. Easy way to see if an email has been read.

Rapportive (https://rapportive.com) is really what makes our direct sales possible. And, Streak plays nice with Rapportive.

trey_swann··on Show HN: Taplytics, A/B testing on iOS without App Store updates
This is a great way to make your native mobile interface completely dynamic. Sure makes mobile A/B testing a whole lot easier. ‘No app store approvals’ is huge. This is cool. I'm a fan!
trey_swann··on Show HN: HIPAA compliant file storage
Dell "Beginnings" http://youtu.be/Ja61fxmY77Q
trey_swann··on Show HN: HIPAA compliant file storage
Thank you for your kind words!

Search functionality will be released by the end of January.

trey_swann··on Show HN: HIPAA compliant file storage
TrueVault does more and costs less than AWS. We also save you hundreds of dev hours.

The HIPAA Security Rule requires appropriate Administrative, Physical, and Technical Safeguards to ensure the confidentiality, integrity, and security of protected health information (PHI).

AWS will sign a BAA, but they only cover the Physical Safeguards (e.g. facility access controls, etc.). TrueVault handles both the Technical and Physical Safeguards.

With AWS you still need to build your own HIPAA compliant application stack. The technical requirements include: -encryption and decryption -key management -key rotation -access control -unique user identification -emergency access -automatic logoff -audit controls -mechanism to authenticate electronic PHI -person or entity authentication -transmission security -integrity controls

trey_swann··on Show HN: HIPAA compliant file storage
Our customers are typically deciding between using TrueVault or a HIPAA compliant hosting provider. The customer is facing a build vs. buy decision.

The HIPAA Security Rule requires appropriate Administrative, Physical, and Technical Safeguards to ensure the confidentiality, integrity, and security of protected health information (PHI). AWS, FireHost, and Rackspace are great! But, HIPAA compliant hosting providers like these only provide a HIPAA ready environment. They will sign a Business Associate Agreement (BAA), but they only handle the Physical Safeguards mandated by HIPAA. If you use a HIPAA compliant hosting provider you still have to spend months developing a HIPAA compliant application stack within that environment.

In contrast, TrueVault provides all client-side and server-side functionalities required by HIPAA, and works just like any other API service. The typical TrueVault integration takes days and saves months of development time.

Plus, if you want AWS to sign a BAA you need to use dedicated instances and each instance hour is 10% more than the standard fee. So your meter starts at $1,500/month if you want to become HIPAA compliant with AWS. FireHost starts at $1,115/month and you are charged a $250 premium for each HIPAA ready instance.

trey_swann··on Show HN: Get your health records from any doctor
Yes, AWS started signing BAAs on June 18th, 2013. FireHost and Rackspace will also sign a BAA.

"AWS enables covered entities and their business associates subject to the U.S. Health Insurance Portability and Accountability Act (HIPAA) to leverage the secure AWS environment to process, maintain, and store protected health information and AWS will be signing business associate agreements with such customers."

http://aws.amazon.com/compliance/

trey_swann··on The API-ization of everything
Armed with APIs, developers will drive the composable enterprise

http://gigaom.com/2013/10/12/armed-with-apis-developers-will...

SUMMARY: The rise of APIs as a source for web services and data means that developers don’t have to reinvent the wheel on every feature — they can source it from an API. This trend brings about the composable enterprise.

trey_swann··on The API-ization of everything
Agreed. I'm a big fan of EasyPost.
trey_swann··on Diary of a programmer with no clue about marketing
Exactly! Well said austenallred.

Most startups fail because they aren’t hitting their target growth rate, not because they failed to build a product that works.

You have to fight to grow. Evaluate how much time you spent building your product, and then invest just as much time in growth-related activities.

trey_swann··on Codecademy (YC S11) on Colbert Report
Would you hire someone who learned to code on Codecademy?

I'm interested to hear what everyone thinks. Will Codecademy be able to "connect people learning on the site with opportunities that fit their skill sets?"

trey_swann··on Ask HN: What are you working on and why is it cool?
Thank you! That's very nice to hear. Let me know if you have any questions. Here to help. trey@truevault.com
trey_swann··on Ask HN: What are you working on and why is it cool?
Again, the steps you will need to take to comply with HIPAA when using TrueVault will vary based on your implementation. I’m happy to jump on the phone and answer any questions that you may have. We can go over the use case that you have in mind and the HIPAA implications. Feel free to email me directly at trey@truevault.com.

To clarify, a Business Associate is any entity that uses or discloses PHI on behalf of a Covered Entity. Furthermore, a Business Associate is any person who, on behalf of a Covered Entity, performs (or assists in the performance of) a function or activity involving the use or disclosure of PHI.

trey_swann··on Ask HN: What are you working on and why is it cool?
The steps you will need to take to comply with HIPAA when using TrueVault will vary based on your implementation.

If you use our JavaScript widgets so that you never actually touch PHI, then you may be able to avoid the Administrative Safeguards. But, if you handle PHI and then send it to TrueVault you will need to comply with the Administrative components of HIPAA.

The HIPAA Security Rule requires appropriate Administrative, Physical, and Technical Safeguards to ensure the confidentiality, integrity, and security of electronic protected health information.

HIPAA compliant hosting handles the Physical Safeguards, a set of rules and guidelines that focus on the physical access to protected health information (PHI).

TrueVault handles both the Physical and Technical Safeguards (Encryption and Decryption, Key Management, Key Rotation, Access Control, Unique User Identification, Emergency Access, Automatic Logoff, Audit Controls, Mechanism to Authenticate Electronic PHI, Person or Entity Authentication, Transmission Security, and Integrity Controls). This is all stuff that you would have to build yourself if you use AWS, FireHost, or Rackspace.

You’re right; Administrative Safeguards should not be ignored. The administrative components are really important when implementing a HIPAA compliance program; you are required to assign a Privacy Officer, complete a risk assessment, implement employee training, review policies and procedures, and execute Business Associate Agreements (BAAs) with partners you share protected health information (PHI) with. I think that Accountable does a great job with the Administrative Safeguards. Accountable offers HIPAA compliance management tools that keep your business legal. Checkout -- http://www.accountablehq.com/

trey_swann··on Ask HN: What are you working on and why is it cool?
Another use case: apps/sites/devices that offer tools to help people track various health-related statistics.

Consumer-originated data, even though it is health data, is not protected health information (PHI) as covered by HIPAA. But, when that health data is shared with a Covered Entity (a doctor, hospital, insurance plan, or other HIPAA-defined CE) then it becomes PHI. And, the app handling the PHI needs to be HIPAA compliant.

People want information, not data. When an app takes health data and feeds it up to a doctor for diagnosis, analysis, advice, or treatment, then that data becomes PHI and your app needs to be HIPAA compliant.

trey_swann··on Ask HN: What are you working on and why is it cool?
That’s a great example. Thank you!
trey_swann··on Ask HN: What are you working on and why is it cool?
Yes, TrueVault is signing Business Associate Agreements (BAAs) with our customers.

TrueVault is also the first to cover customers under a comprehensive Privacy/Data Breach Insurance policy. As a result, TrueVault is able to indemnify our customers for, from, and against regulatory fines and the cost of breach remediation.

trey_swann··on Ask HN: What are you working on and why is it cool?
Many thanks! Appreciate the kind words.

We offer a 30-day free trial, so you can play around with our API without entering a credit card. Caveat -- don’t send us any real PHI until we sign a BAA.

Please feel free to test it out, and if you have any questions shoot me an email. trey@truevault.com

We get to see a wide variety of use cases, happy to share our experiences.

trey_swann··on Ask HN: What are you working on and why is it cool?
Pretty close.

Stripe is really just used for comparison purposes. Using Stripe makes you PCI compliant, and using TrueVault makes you HIPAA compliant. Also it demonstrates that TrueVault is not a consumer facing document storage solution (not a HIPAA compliant Dropbox). You access data in TrueVault via our API and native clients.

Bottom line, if your application needs to be HIPAA compliant it’s a pain. If you push your protected health information (PHI) to TrueVault, then you don’t have to spend months and months developing your own HIPAA compliant infrastructure.

Page 1 of 2Next →