-
Notifications
You must be signed in to change notification settings - Fork 308
write a "Do no evil" contract #1443
Comments
While this is a good idea on the one hand... on the other hand, you have non-US "workers" and not all US valid legalisms are legal in other countries. I know some clauses used in the US can be automatically null-and-void in the Netherlands for example. International legal contracts (which is what we'd be talking about) can be quite complex. Could be pricey and also serve as a deterrent (due to complexity of understanding its consequences) for "workers" Just a thought.... |
@mvdkleijn Perhaps, but I think this is more for the people working with anything that can't be public, like databases, SSL certs, root passwords, etc. So more of an NDA than anything, with some extras that outline how much responsibility comes with great power. |
@mvdkleijn Good point. I'll bring that up with the lawyer. |
Does this fit under Infrastructure? |
Well, it's not user-visible, and addresses a systems/process issue (scaling the team). So ... yes? |
+1 from @ribasushi in private email (see also #2028). |
I've emailed a lawyer about this:
|
Promoting to TeamX ★. I want to feel good about handing out access to people. |
Ping @copiesofcopies. Here's the ticket I mentioned on our call, to be addressed once #3399 settles down. |
Moved to gratipay/inside.gratipay.com#528. |
IRC
The proposal is that we come up with a simple contract and run it by a lawyer and get that on file for people to whom we want to give access to sensitive data.
Want to back this issue? Post a bounty on it! We accept bounties via Bountysource.
The text was updated successfully, but these errors were encountered: