Skip to end of metadata
Go to start of metadata

You are viewing an old version of this page. View the current version.

Compare with Current View Page History

« Previous Version 15 Next »

All Tidepool employees and subcontractors work remotely.

Some full-time Tidepool team members with privileged access reside outside of the United States. These international subcontractors are legally bound by the same confidentiality and security requirements as our US-based employees.

Tidepool employees with critical production access

Access to servers is limited, logged and audited and defined explicitly using Role Based Access Control (RBAC).

Employees accessing our production database or applications authenticate using two-factor authentication.

We do not allow SSH access or direct access to systems using the root account; only accounts explicitly named in our configuration can access legacy EC2 hosts with a defined role. EC2 nodes contain only Analytics and Sandbox testing of new software/technology.

SSH is disabled on all production systems and enforced by configuration and policy. SSH is available only on legacy EC2 systems.

  • SSH key pairs use strong passphrases and no host can be accessed directly except via a Bastion host.

Login access to the AWS console uses two-factor authentication.

Tidepool employees with full administrator access, including the production database (PHI):

Tapani Otala

Ben Derr

Todd Kazakov

Alexander Diana

Software engineers with software deployment access for Tidepool Web

Clint Beacock

Chris McGee

Software engineers with software deployment access for Tidepool Uploader

Gerrit Niezen

Chris McGee

Software engineers with software deployment access for Tidepool Mobile

Nate Hamming

Pete Schwamb

Tapani Otala

Tidepool employees with user support access in ZenDesk

All full time Tidepool employees (including full time contractors) may provide user support and have access to end user account conversations in their support capacity. These conversations may include discussion of PHI.

Tidepool employees with user support access in Tidepool Web

Some end-users may choose to share their Tidepool account data directly with support@tidepool.org to assist with technical support questions and troubleshooting. The following Tidepool employees have access to this account.

Becky Cooney

Ben Derr

Chris McGee

Christopher Snider

Clint Beacock

Dave Cintron

Gerrit Niezen

Ginny Yadav

Howard Look

Nick Riggall

Tapani Otala

Todd Kazakov

  • No labels