Deployment and HIPAA compliance

[EmCousin]

⚠️ Disclaimer Heroku might not be suitable to host healthcare datas in your country. We are providing this deploy link on Heroku because we think it's the easiest way to deploy a web application ;) ⚠️

Heroku does provide a solution for this, called Heroku Shield. Despite this being a business plan, I suggest you contact them and ask for their support given the situation.

Other documentation to consider:

• AWS and HIPAA compliance
• If we want to secure the data with an European Platform as a Service to fully benefit the GDPR's protections, consider also contacting Scalingo

Any contributions are welcome when it comes to suggest other deployment solutions, should it only be to update the README.md file when the time comes

[benoittgt]

Hello

@schneems or @mble do you think it could be possible?

Cheers

[b0l0k]

Yes, it's a way. 👌

But , warning ⚠️, for health french data, HIPAA is not sufficient. Only hosts with HDS certification (issued by ASIP) must be used : list.

[madmath03]

Hi,

We discovered this project and saw this deployment subject so we decided to build a docker container for it : https://github.com/Monogramm/docker-covid

I believe this might help to deploy it easily on more systems.

We're pretty used to building docker containers but not so much when it comes to Ruby applications, so feel free to report any issues you may find. PR are also welcome.