They’re extremely new and open about what’s missing though. Their plans apparently got somewhat thrown all over the place by the sudden extreme interest and quite a few things aren’t yet in place (such as the self-hosting guide). Still works surprisingly well, and what they do goes into the right direction (no VC funding or investors, removal of the CLA, bound to GDPR, a full FOSS atack, etc).
What I’ve seen makes me bet I could be dragging iso27002 out and marking all the rules it breaks. …and the devs won’t know what that means.
They’re extremely new and open about what’s missing though. Their plans apparently got somewhat thrown all over the place by the sudden extreme interest and quite a few things aren’t yet in place (such as the self-hosting guide). Still works surprisingly well, and what they do goes into the right direction (no VC funding or investors, removal of the CLA, bound to GDPR, a full FOSS atack, etc).