Hey drcongo. Things like this occur at every cloud provider and I would never be comfortable promising you it's not a possibility. What I can tell you is that DO invests very heavily in trust and security (moreso than any company of our size that I've seen in my career). While we are far from perfect, we have a ton of controls in-place to ensure things like this don't happen, especially for customers with your type of track record.
Always happy to chat live with you, just open up a ticket or email me at the address above.
Hey folks, I'm the CSO over at DigitalOcean (verification: https://keybase.io/custos). I'm going to look into this so we can figure out what happened here. Garland, I've temporarily set up an email alias which is my HN username [@] digitalocean.com - can you please shoot me some info?
No downvotes intended (new HN account, so I can't even downvote yet :))! It was a good question and a great call out.
I'll talk to the team about getting a click through BAA process in-place, perhaps somewhere in the control panel. Right now they tend to be executed once our customer success team gets engaged.
Hi! I'm the CSO over at DO. We will sign Business Associate Agreements and certainly believe we fulfill the Security and Privacy Rules (and well beyond).
Not sure why that was posted on our community site, but we'll get it fixed :).
Always happy to chat live with you, just open up a ticket or email me at the address above.