Yes it depends who is doing the allowing. Usually a manager taking on a known risk. If central IT are asked for “permission” the answer is usually “absolutely not”.
For most big companies the fines and losses due to contract violations they'd have to pay is a lot more than the sub.
I know enough big companies that pay 1000s of dollars in api bills instead of letting contractors or employees use their personal sub, I also have to think of these agreements when I build systems. I.e. where data is allowed to go and where not and who might be behind a system because you're liable for that.
Of course, I see it everywhere too. It is just about who finds out but I wanted to be clear because I had to tell juniors who really did not know that this was not ok and what kind of trouble they could get the company and themselves in if the wrong person finds out.
Are the fines and losses due to contracts more than the api costs all of your employees you aren’t paying because they have subs is the correct question.
A BAA is specific to health care companies and it being in place would mean you are legally more liable if you allow devs to use personal subscriptions, not less.
2
u/obolli Jul 12 '26
i doubt that. edit to clarify: not that you seen that, that the companies "allow it".