Privacy and Security
Every aspect of the project will follow generally accepted best practices for security. I have a background in information security and from the beginning I designed the infrastructure, database, and application, to adhere to generally accepted best practices for security.
I like the idea of making any customized code we write as open source. We might fork off MediaWiki
The entire architecture will be build with the following goals
- Each user owns their own data and everything is private by default
- Within a few years, we plan to have independent audits to validate:
- Technical: application, source code, infrastructure, multi-tenant isolation
- Resiliency: data privacy, backup and disaster recovery
- Procedural: SOC 2, ISO 27001
- Infrastructure should be able to scale to 100,000 users
- Use open source technologies whenever possible
- Cost optimization
- Automate as much as possible to minimize time required for operational maintenance