Comment by scotty79
4 days ago
> What about data residency and retention?
If you are sending data over the internet to someone else's computer, who you can't or won't audit, you should keep you expectations realistic.
You can be sure that comapnies will only do ZDR if your data is more expensive to keep than its utility to them, even if they claim something else.
That's why we sign DPA in Europe, it's a matter of liability transfer. I agree on your point, but that is not the issue here.
Not sure why you're being downvoted. This is very reasonable to expect people to run themselves if they have an expectation of privacy. There is basically no reason to trust someone at their word about data retention when you can run it yourself as easily as this.