Data Privacy & Security

Experience with Data Privacy & Security

Data privacy and security are foundational principles in Pablo Diaz's engineering philosophy, shaped by his Amazon AWS experience where security is treated as a first-class concern in every system design, and reinforced by the real-world stakes of handling healthcare PHI on OpenMyPro and encrypted communications on WeTalkin. Pablo's approach to data privacy goes beyond checking compliance boxes — he designs systems where privacy is architecturally enforced, not just policy-enforced. This means choosing technologies and patterns that make privacy violations technically difficult rather than relying on developer discipline. On OpenMyPro, Supabase's Row Level Security ensures that unauthorized data access is impossible at the database level — even if application code has a bug that bypasses access checks, the database itself refuses to return data the user is not authorized to see. On WeTalkin, the zero-knowledge encryption architecture meant that even WeTalkin's own servers could not decrypt user messages — privacy was guaranteed by the mathematical properties of the encryption, not by a privacy policy promise. Pablo's security expertise covers multiple domains: network security (TLS 1.3, HSTS, CSP headers, CORS configuration), application security (input validation, output encoding, parameterized queries, CSRF protection), authentication security (JWT with rotation, HTTP-only cookies, MFA, zero-knowledge proofs), infrastructure security (least-privilege IAM, encrypted storage, secrets management, VPC isolation), and operational security (audit logging, incident response, access reviews, vulnerability scanning). He applies the principle of defense in depth — multiple independent security layers that each provide protection, so that the failure of any single layer does not compromise the system. This approach was refined at Amazon where systems handle data for millions of users, and is applied at Blossend where healthcare and personal communication data demand the highest standards of protection. Pablo's security practices have maintained zero data breaches and zero security incidents across all Blossend platforms since launch, protecting data for over 150K+ users.

Frequently Asked Questions