> I’d need to operate administrative files (customer records, contracts, accounting) on a separate machine from dev
You're saying that like it is a bad thing?
A developer probably shouldn't have access to all that live data anyways.
You're saying that like it is a bad thing?
A developer probably shouldn't have access to all that live data anyways.
Unfortunately unless you get ridiculously creative and put in a bunch of extra time instead of cloud service spend, SOC2 compliance is gonna be expensive
For this kind of issue one could use VM's where you encrypt the VM with the live customer data. Another option would be to use cloud.
But yes.. there's also nothing wrong with having more than one machine to physically separate the systems and thus data. Bonus on that one is that you can shut it down if not needed and as such it won't be accessible over the network unless switched on.
Personally -as a small developer myself- I use all of the above.