alpine token
Following the various data breaches lately involving Zendesk, including with Discord's latest data breach, I believe it is time for Bunny to stop using Zendesk to show their dedication to customer security.
Zendesk has a lack of data security which allows generic support user accounts to be used to exfiltrate data, and the data is held on US servers, which goes against Bunny's privacy stances.
For example, see: https://youtu.be/9X2T1dI_JS8
Delete all data from Zendesk, stop using it for support ticketing, drop it & self host your own
Also related: #1427101057246560398 message
charred oxide
and the data is held on US servers
My Zendesk data is stored in the EU 😆
Zendesk has a lack of data security which allows generic support user accounts to be used to exfiltrate data
That's not limited to Zendesk. That's just how the modern internet works. Pages talk to APIs to get data. Thus accounts have API access. The bunny.net dashboard just uses the API as well innit. That's then also "lack of data security" because an account can be used to exfiltrate data for the whole bunny account
Also worth noting that people can simply lock down their Zendesk accounts to their VPN IPs, then even the API is not accessible outside the allowed IPs, thus you'd have much bigger problems
gritty saffron
The support platform data resides 100% in the EU, nothing is stored on US servers.
While we of course cannot speak to the specifics of our security practices, we are continually working to ensure the security of our platform and privacy of our customers.
We are hyper conscious of the responsibility we have with the data our clients trust us with, and we have dedicated Security and Compliance bunnies working to ensure our Security our compliance of EU privacy and data protection legislation.
alpine token
The support platform data resides 100% in the EU, nothing is stored on US server...
Well said Bryan 
Glad to know the data is safe cough unlike a certain online messaging platform
alpine token
The support platform data resides 100% in the EU, nothing is stored on US server...
Are there any plans your end in future to look into self hosted options?
It would be a nice thing to see happen. I love breaking free of third parties myself in my tech stack 
gritty saffron
Indeed that would be nice, but there's nothing on the roadmap for this at the moment. We will share updates on future privacy or EU sovereignty changes as and when.
alpine token
Indeed that would be nice, but there's nothing on the roadmap for this at the mo...
👀 can't wait to hear it
Not sure why but for some reason the H1 program isn't mentioned under the Vulnerability Management section... I wonder why? 🤔
Having a reasonable disclosure program is certainly something to boast about
