I cannot remember the specifics of the EU directive off hand as to whether or just applies to storage of the data or whether it's not pertaining to the storage AND communication of the data (just like PCI for instance).
If it's just storage, bear in mind that you don't have to use the Heroku databases if you don't want to. You could use anything which is hosted directly on EC2 (as Amazon IS Safe Harbor certified). You've Amazon RDS (If you're not bothered by MySQL), you've got many AMI's out there featuring Postgres, and I dare say some other options too. Obviously this doesn't help you if you want to stick everything onto the Heroku platform, but it does mean that you have options which doesn't stop you from using the slick Heroku deployment and management - it's the data that cannot make use of the Heroku platform. I know Heroku are still working on Safe Harbor ceritfication, but it isn't a small thing and will take time. Neil On Thu, Jan 26, 2012 at 11:33 AM, Rich Aston <r...@futuremill.co.uk> wrote: > We hit exactly this problem. The legal advice we got was explicit: EU > companies can not host any personal data with Heroku as it stands. > There are two potential solutions: > > 1. Heroku could sign up to Safe Harbor. > 2. They could offer EU based servers. > > When I spoke to them about this last year they were hoping to be > signed up to Safe Harbor by the end of 2011, but they missed this and > I've been given no new date that they are aiming for. In the end we > had to move to Engine Yard (who are both Safe Harbor compliant and > offer EU servers) and this is working out pretty well for us. But we > would love the option to come back to Heroku. > > Rich > > > > On Dec 18 2011, 12:06 pm, Nicola Brisotto <nicolabriso...@gmail.com> > wrote: > > Hi! > > Do you have any news on this topic? When Heroku will become members of > > Safe Harbor? > > -- > You received this message because you are subscribed to the Google Groups > "Heroku" group. > To post to this group, send email to heroku@googlegroups.com. > To unsubscribe from this group, send email to > heroku+unsubscr...@googlegroups.com. > For more options, visit this group at > http://groups.google.com/group/heroku?hl=en. > > -- Neil -- You received this message because you are subscribed to the Google Groups "Heroku" group. To post to this group, send email to heroku@googlegroups.com. To unsubscribe from this group, send email to heroku+unsubscr...@googlegroups.com. For more options, visit this group at http://groups.google.com/group/heroku?hl=en.
