You can just do what my university did, hire a small shell firm with 3 employees to hold all your data, and when it got hacked they just went bankrupt and we switched to a new shell firm with similar form and function.
Minimizes money usage and does not require any security investments
augment_me · · focus · HN ↗
Minimizes money usage and does not require any security investments
dmos62 · · focus · HN ↗
EA-3167 · · focus · HN ↗
Sort of like EULA's a lot of the "value" is incredibly theoretical.