# Shared Responsibility Model A cloud security model that allocates security responsibilities between a cloud service provider and its customer. This is one page of public article previews, not the complete archive. Follow Next page to continue. Summaries are not the original full articles. ## How to verify your Azure Application Gateway is zone-redundant DevFeed: [How to verify your Azure Application Gateway is zone-redundant]() Original publisher: [Read original article]() Author: Andre Newman Published: 2026-09-04T00:00:00Z Content type: article Language: en Sources: [Gremlin Blog]() Topics: [Azure](), [Availability](), [Cloud](), [web applications](), [Command-line interface](), [Shared Responsibility Model]() Tags: [availability](), [azure](), [cli](), [cloud](), [features](), [high-availability](), [how-to](), [infrastructure](), [post](), [shared-responsibility](), [web-applications]() ### AI overview This how-to article explains availability-zone redundancy for Azure Application Gateway. It describes the redundancy model, the shared responsibility boundary, and how to verify whether a gateway is zone-redundant or zonal using Azure CLI and Resource Graph. It also cautions that a redundant gateway does not by itself make the services behind it redundant. ### Source excerpt This post explains what zone redundancy means for Application Gateway, how to confirm whether a given gateway is zone-redundant or zonal using the Azure CLI and Resource Graph, and why a gateway surviving a zone failure doesn't mean the services calling through it will. ## What is a Minimum Viable Platform (MVP)? DevFeed: [What is a Minimum Viable Platform (MVP)?]() Original publisher: [Read original article]() Author: Luca Galante Published: 2026-08-21T14:37:28Z Content type: article Language: en Sources: [Platform Engineering Blog]() Topics: [Platform Engineering](), [internal developer platform](), [Developer Platform](), [Shared Responsibility Model]() Tags: [engineering](), [evaluation](), [gartner](), [idp](), [internal-developer-platform](), [organizational](), [platform](), [platform-engineering](), [shared-responsibility](), [speed]() ### AI overview This article explains why platform engineering initiatives often fail despite widespread adoption of internal developer platforms. It argues that culture, process, and delivery speed matter more than tooling choices, and recommends starting with a Minimum Viable Platform to build stakeholder support and deliver value quickly. ### Source excerpt Unlock success in platform engineering: Avoid common pitfalls, embrace MVP approach, and win stakeholder support for a transformative platform initiative. ## Where Apollo MCP Server Stands on the OWASP MCP Top 10 DevFeed: [Where Apollo MCP Server Stands on the OWASP MCP Top 10]() Original publisher: [Read original article]() Author: Camille Lawrence Published: 2026-08-14T17:11:10Z Content type: article Language: en Sources: [Apollo Blog]() Topics: [Model Context Protocol](), [MCP Server](), [audit](), [Shared Responsibility Model](), [configuration](), [GraphQL](), [Rust](), [Self-hosted]() Tags: [announcement](), [apollo](), [apollo-mcp-server](), [audit](), [configuration](), [graphql](), [hardening](), [mcp](), [mcp-server](), [rust](), [self-hosted](), [shared-responsibility]() ### AI overview This article evaluates Apollo MCP Server against all ten risks in the latest reviewed OWASP MCP Top 10 revision. It finds that the server's architecture directly closes one risk because typed GraphQL operations are parsed and type-checked without shell execution. The remaining risks require configuration, monitoring, and team-owned security decisions. ### Source excerpt Architecture alone closes 1 of the ten risks in OWASP's MCP Top 10. See how Apollo MCP Server scores on the rest, and which configuration choices remain yours. ## Credit Card Surcharging Rules for Digital Businesses DevFeed: [Credit Card Surcharging Rules for Digital Businesses]() Original publisher: [Read original article]() Author: Deepak Jangir Published: 2026-08-10T00:00:00Z Content type: article Language: en Sources: [Dodo Payments Blog]() Topics: [Software as a service](), [Shared Responsibility Model]() Tags: [australia](), [canada](), [checkout](), [cost](), [fees](), [global](), [india](), [legal](), [payment](), [payments](), [policy](), [pricing](), [saas](), [united-kingdom]() ### AI overview This article explains credit card surcharging for digital businesses, including its definition, geographic restrictions, card-network requirements, caps, notification duties, and disclosure obligations. It emphasizes that SaaS businesses operating globally must evaluate surcharging separately by market because it is prohibited or restricted in several jurisdictions and can put card-acceptance accounts at risk. It also points to market-specific pricing as an alternative. ### Source excerpt How credit card surcharging works, where it is legal, what the card network caps and disclosure rules require, and better alternatives for SaaS pricing. ## Merchant of Record Services: What They Cover in 2026 DevFeed: [Merchant of Record Services: What They Cover in 2026]() Original publisher: [Read original article]() Author: Aarthi Poonia Published: 2026-06-24T00:00:00Z Content type: tutorial Language: en Sources: [Dodo Payments Blog]() Topics: [Software as a service](), [Shared Responsibility Model]() Tags: [2026](), [compliance](), [cross-border](), [global-payments](), [guide](), [merchant-of-record](), [payments](), [pricing](), [saas](), [tax]() ### AI overview A 2026 guide to merchant of record services for SaaS businesses, explaining how they handle tax compliance, payment methods, chargebacks, disputes, pricing, and cross-border operations, plus how to choose a service. ### Source excerpt A clear guide to merchant of record services in 2026: what an MoR handles, tax and chargeback liability, pricing, and how to choose one for global SaaS. ## Hosted vs Self-Hosted Payment Gateway: Which Is Right for Your SaaS? DevFeed: [Hosted vs Self-Hosted Payment Gateway: Which Is Right for Your SaaS?]() Original publisher: [Read original article]() Author: Ayush Agarwal Published: 2026-06-08T00:00:00Z Content type: tutorial Language: en Sources: [Dodo Payments Blog]() Topics: [Self-hosted](), [Software as a service](), [Shared Responsibility Model](), [API]() Tags: [api](), [architecture](), [compliance](), [gateway](), [payment-gateway](), [payments](), [pci-dss](), [saas](), [self-hosted]() ### AI overview This guide compares hosted and self-hosted payment gateways for SaaS products. Hosted gateways keep card-data collection on the provider's infrastructure, reducing PCI DSS scope and integration work, while self-hosted gateways provide more control over checkout and customer experience but require greater compliance effort. Client-side tokenization can keep raw card data out of the backend. ### Source excerpt Hosted vs self-hosted payment gateway compared. PCI scope, control, integration speed, and which model fits SMB SaaS, enterprise, and global product-led companies. ## Digital Services Tax (DST): A Global Guide for SaaS Sellers DevFeed: [Digital Services Tax (DST): A Global Guide for SaaS Sellers]() Original publisher: [Read original article]() Author: Aarthi Poonia Published: 2026-05-30T00:00:00Z Content type: article Language: en Sources: [Dodo Payments Blog]() Topics: [Software as a service](), [Shared Responsibility Model]() Tags: [compliance](), [global](), [guide](), [saas](), [tax]() ### AI overview This guide explains how digital services tax applies across jurisdictions, including differences in rates, revenue thresholds, taxable services, and compliance obligations for SaaS sellers. DST is generally levied on gross revenue connected to users in a country, potentially affecting businesses without a physical presence there. ### Source excerpt Digital services tax explained - which countries charge DST, how rates and thresholds differ, and what SaaS sellers need to do to comply across multiple jurisdictions. ## Top Paymob Alternatives for MENA SaaS and Online Businesses in 2026 DevFeed: [Top Paymob Alternatives for MENA SaaS and Online Businesses in 2026]() Original publisher: [Read original article]() Author: Ayush Agarwal Published: 2026-05-19T00:00:00Z Content type: comparison Language: en Sources: [Dodo Payments Blog]() Topics: [Software as a service](), [Shared Responsibility Model]() Tags: [2026](), [alternatives](), [compare](), [compliance](), [cross-border](), [fintech](), [mena](), [merchant-of-record](), [pakistan](), [payment](), [pricing](), [saas](), [vat]() ### AI overview A comparison guide for MENA SaaS and online businesses evaluating alternatives to Paymob in 2026. It discusses regional payment coverage, local-currency settlement, cross-border USD billing, VAT compliance, and the distinction between Payment Facilitators and Merchants of Record. ### Source excerpt Compare the best Paymob alternatives for SaaS founders across Egypt, KSA, UAE, Oman and Pakistan in 2026. Verified pricing, ZATCA and e-invoicing context, and a clear take on Merchant of Record for cross-border MENA SaaS. ## Top Flutterwave Alternatives for African SaaS and Online Businesses in 2026 DevFeed: [Top Flutterwave Alternatives for African SaaS and Online Businesses in 2026]() Original publisher: [Read original article]() Author: Ayush Agarwal Published: 2026-05-17T00:00:00Z Content type: comparison Language: en Sources: [Dodo Payments Blog]() Topics: [Software as a service](), [Shared Responsibility Model]() Tags: [2026](), [africa](), [alternatives](), [compare](), [cross-border](), [fintech](), [merchant-of-record](), [payments](), [pricing](), [saas]() ### AI overview A comparison of Flutterwave alternatives for African SaaS and online businesses in 2026. It examines regional payment coverage, pricing, settlement, compliance, chargeback liability, and the Merchant of Record model for businesses serving international customers. ### Source excerpt Compare the best Flutterwave alternatives for African SaaS founders in 2026. Verified pricing across Nigeria, Kenya, South Africa, Ghana and beyond, plus a clear take on the Merchant of Record model for cross-border African businesses. ## EU Digital Services Tax: What SaaS Founders Need to Know in 2026 DevFeed: [EU Digital Services Tax: What SaaS Founders Need to Know in 2026]() Original publisher: [Read original article]() Author: Ayush Agarwal Published: 2026-04-13T00:00:00Z Content type: tutorial Language: en Sources: [Dodo Payments Blog]() Topics: [Software as a service](), [Shared Responsibility Model](), [Binance](), [API](), [Cloud]() Tags: [b2b](), [compliance](), [consumer](), [digital-products](), [eu](), [how-to](), [merchant-of-record](), [saas](), [subscription](), [tax](), [vat]() ### AI overview This guide explains how EU VAT applies to SaaS and other electronically supplied digital services. It covers customer location, B2B reverse charge rules, B2C collection obligations, and the role of a Merchant of Record in handling compliance complexity. ### Source excerpt Understand the EU digital services tax landscape, VAT obligations for digital products, and how to stay compliant when selling SaaS to European customers. ## How to Calculate Churn Rate (With Formulas and Examples) DevFeed: [How to Calculate Churn Rate (With Formulas and Examples)]() Original publisher: [Read original article]() Author: Ayush Agarwal Published: 2026-04-12T00:00:00Z Content type: tutorial Language: en Sources: [Dodo Payments Blog]() Topics: [Software as a service](), [Shared Responsibility Model]() Tags: [billing](), [churn](), [examples](), [guide](), [how-to](), [payments](), [recovery](), [retention](), [saas-metrics](), [subscription]() ### AI overview A practical guide to calculating customer and revenue churn rates for SaaS businesses. It explains the correct denominator, provides formulas and examples, and discusses how failed payments and recovery workflows affect churn analysis. ### Source excerpt Learn how to calculate churn rate with clear formulas, examples, and cohort tips so you can measure customer loss accurately and improve retention. ## Outcome-Based Pricing: Why SaaS Is Moving Beyond Subscriptions DevFeed: [Outcome-Based Pricing: Why SaaS Is Moving Beyond Subscriptions]() Original publisher: [Read original article]() Author: Ayush Agarwal Published: 2026-04-07T00:00:00Z Content type: tutorial Language: en Sources: [Dodo Payments Blog]() Topics: [Software as a service](), [Shared Responsibility Model]() Tags: [pricing](), [saas](), [subscriptions](), [usage-based-billing]() ### AI overview This article explains outcome-based pricing for SaaS, where customers pay for measurable successful results rather than access, seats, or raw usage. It compares the model with usage-based billing, gives practical examples, and discusses implementation challenges. ### Source excerpt Outcome-based pricing ties what customers pay to results delivered. Learn how this model works for SaaS, when to use it, and how to implement it with AI-powered billing. ## Why Lifetime Deals (LTDs) are a Double-Edged Sword for SaaS DevFeed: [Why Lifetime Deals (LTDs) are a Double-Edged Sword for SaaS]() Original publisher: [Read original article]() Author: Aarthi Poonia Published: 2026-03-31T00:00:00Z Content type: article Language: en Sources: [Dodo Payments Blog]() Topics: [Software as a service](), [Shared Responsibility Model]() Tags: [analysis](), [bankruptcy](), [payments](), [pricing](), [saas](), [startups](), [subscription]() ### AI overview This analysis examines lifetime deals for SaaS startups, including their potential to provide immediate cash and their long-term risks when customer service and infrastructure costs continue without recurring payments. ### Source excerpt An in-depth analysis of lifetime deals for SaaS startups, exploring when they provide a critical cash injection and when they lead to long-term bankruptcy. ## How to Set Up Affiliate Payouts for Your Digital Product DevFeed: [How to Set Up Affiliate Payouts for Your Digital Product]() Original publisher: [Read original article]() Author: Ayush Agarwal Published: 2026-03-31T00:00:00Z Content type: tutorial Language: en Sources: [Dodo Payments Blog]() Topics: [Software as a service](), [dashboards](), [Shared Responsibility Model]() Tags: [automated](), [customer](), [digital-products](), [how-to](), [partnerships](), [payment](), [payments](), [reporting](), [revenue](), [saas](), [tax]() ### AI overview This guide explains how to create an automated affiliate program for digital products. It covers referral tracking, transparent reporting, commission management, and reliable payouts, including considerations for global payments and local tax compliance. Dodo Payments is presented as a way to simplify the process. ### Source excerpt Scale your digital product sales with an automated affiliate program. Learn how to track referrals and manage payouts using Dodo Payments. ## Billings vs Revenue: Understanding Bookings, Billings, and Revenue in SaaS DevFeed: [Billings vs Revenue: Understanding Bookings, Billings, and Revenue in SaaS]() Original publisher: [Read original article]() Author: Ayush Agarwal Published: 2026-03-28T00:00:00Z Content type: tutorial Language: en Sources: [Dodo Payments Blog]() Topics: [Software as a service](), [Shared Responsibility Model]() Tags: [billing](), [finance](), [guide](), [revenue](), [saas](), [saas-metrics]() ### AI overview A guide to the distinctions among bookings, billings, and recognized revenue in SaaS. It explains how these metrics relate across the quote-to-cash process and uses contract examples to show why confusing them can lead to poor financial and operating decisions. ### Source excerpt Clear explanation of bookings vs billings vs revenue in SaaS. Includes timeline examples, comparison tables, and why these metrics matter. ## Stripe Alternatives for SaaS: 8 Best Options in 2026 DevFeed: [Stripe Alternatives for SaaS: 8 Best Options in 2026]() Original publisher: [Read original article]() Author: Ayush Agarwal Published: 2026-03-25T00:00:00Z Content type: comparison Language: en Sources: [Dodo Payments Blog]() Topics: [Software as a service](), [stripe](), [Shared Responsibility Model]() Tags: [2026](), [alternatives](), [billing](), [comparison](), [global-payments](), [merchant-of-record](), [payments](), [pricing](), [stripe](), [subscription](), [tax]() ### AI overview A comparison of eight Stripe alternatives for SaaS, covering Merchant of Record platforms, billing-focused systems, and enterprise processors. It explains how recurring billing, tax compliance, chargebacks, localization, and subscription operations affect the choice of monetization stack. ### Source excerpt Compare the best Stripe alternatives for SaaS in 2026, including Merchant of Record platforms, billing stacks, and enterprise processors, with verified pricing notes and practical fit by use case. ## Neon is HIPAA Compliant DevFeed: [Neon is HIPAA Compliant]() Original publisher: [Read original article]() Author: Busra Demir Published: 2025-03-13T16:17:42Z Content type: article Language: en Sources: [Blog -- Neon Docs]() Topics: [Database](), [Security](), [Authorization](), [Encryption](), [Incident response](), [Monitoring](), [Shared Responsibility Model](), [Software as a service]() Tags: [access-control](), [company](), [compliance](), [database](), [encryption](), [hipaa](), [incident-response](), [iso-27001](), [logging](), [monitoring](), [product](), [security](), [security-best-practices](), [shared-responsibility](), [soc-2]() ### AI overview Neon announces completion of its HIPAA compliance audit, enabling customers to store Protected Health Information (PHI) on its database platform. The article describes safeguards including encryption, role-based access control, audit logging, continuous monitoring, incident response, breach notification, employee training, third-party requirements, and shared customer responsibilities. ### Source excerpt Neon has completed its HIPAA compliance audit, adding to our security achievements: SOC 2 Type 2, ISO 27001, ISO 27701, GDPR, and CCPA. If your company needs a HIPAA-compliant database, Neon can now securely store Protected Health Information (PHI). What is HIPAA Compliance? The... ## Maximizing your reliability on AWS DevFeed: [Maximizing your reliability on AWS]() Original publisher: [Read original article]() Author: Andre Newman Published: 2025-01-13T00:00:00Z Content type: tutorial Language: en Sources: [Gremlin Blog]() Topics: [Amazon Web Services](), [Shared Responsibility Model](), [Amazon EC2](), [Availability](), [cloud-infrastructure](), [Amazon Elastic Kubernetes Service](), [App]() Tags: [amazon](), [amazon-ec2](), [availability](), [aws](), [cloud](), [compute](), [how-to](), [infrastructure](), [learn](), [shared-responsibility-model](), [use-cases]() ### AI overview This article explains how to improve workload reliability on AWS despite the cloud platform's limited visibility and shared responsibility model. It examines failure modes and mitigation options for services including Amazon EC2, Amazon EKS, and ECS, with emphasis on resilience, recoverability, fault tolerance, and EC2 auto-scaling groups. ### Source excerpt Learn how to maximize reliability when running workloads on Amazon EC2, EKS, ECS, and other services. ## Supabase Security Suite DevFeed: [Supabase Security Suite]() Original publisher: [Read original article]() Author: Paul Copplestone Published: 2024-07-11T07:00:00Z Content type: article Language: en Sources: [Supabase Blog]() Topics: [Supabase](), [Security](), [Shared Responsibility Model](), [dashboards](), [Tooling]() Tags: [postgres](), [security](), [security-rules](), [security-tools](), [self-hosting](), [shared-responsibility]() ### AI overview Supabase describes a three-month security, performance, and stability effort conducted with security researcher Eva and her colleagues. The article discusses Supabase's shared-responsibility approach, platform-integrated security tooling, use of Postgres Row Level Security, Lunchcat integration plans, Security Advisor rules and one-click fixes, and weekly security notifications for project owners. ### Source excerpt Learn how to use range columns in Postgres to simplify time-based queries and add constraints to prevent overlaps. ## What is the Well-Architected Cloud Test Suite? DevFeed: [What is the Well-Architected Cloud Test Suite?]() Original publisher: [Read original article]() Author: Gavin Cahill Published: 2024-07-05T00:00:00Z Content type: article Language: en Sources: [Gremlin Blog]() Topics: [Resilience](), [Cloud](), [Shared Responsibility Model](), [autoscaling](), [Amazon Web Services](), [observability]() Tags: [autoscaling](), [aws](), [cloud](), [features](), [gremlin](), [observability](), [outage](), [resilience](), [shared-responsibility](), [testing](), [validation]() ### AI overview Gremlin's Well-Architected Cloud Test Suite provides a foundation for testing cloud reliability against common failure modes. It supports validation of resilience principles, including autoscaling behavior, and can help identify problems before they cause real outages. ### Source excerpt Find out the tests included in Gremlin's Well-Architected Cloud Test Suite to make it easier than ever to verify your cloud reliability. ## Resiliency is different on AWS: Here's how to manage it DevFeed: [Resiliency is different on AWS: Here's how to manage it]() Original publisher: [Read original article]() Author: Andre Newman Published: 2024-04-02T00:00:00Z Content type: article Language: en Sources: [Gremlin Blog]() Topics: [Amazon Web Services](), [Resilience](), [Shared Responsibility Model](), [on-prem](), [Cloud](), [Containers](), [incident](), [Kubernetes]() Tags: [aws](), [cloud](), [incident](), [on-prem](), [reliability-management](), [resilience](), [shared-responsibility-model]() ### AI overview The article explains that reliability on AWS follows a shared responsibility model. AWS is responsible for the resilience of its platform, while customers remain responsible for the resilience and reliability of their deployed workloads, including containers, virtual machine instances, and serverless functions. It contrasts this with on-premises environments, where organizations control the infrastructure and can directly investigate and mitigate incidents. ### Source excerpt Learn about the reliability risks you can still run into when deploying to AWS, and how to avoid them. ## How to make your services zone redundant DevFeed: [How to make your services zone redundant]() Original publisher: [Read original article]() Author: Andre Newman Published: 2024-02-08T00:00:00Z Content type: tutorial Language: en Sources: [Gremlin Blog]() Topics: [Availability](), [cloud-computing](), [Amazon Web Services](), [Shared Responsibility Model](), [datacenter](), [Azure]() Tags: [availability](), [aws](), [azure](), [cloud](), [cloud-computing](), [datacenter](), [gremlin](), [how-to](), [infrastructure](), [outages](), [shared-responsibility](), [shared-responsibility-model]() ### AI overview This tutorial explains zone redundancy and how to design services that continue operating when an AWS availability zone fails. It covers multi-zone infrastructure, outage risks, resilience testing, and the customer's responsibilities under the cloud Shared Responsibility Model. ### Source excerpt Learn how to prepare for--and become resilient to--availability zone and region outages. ## A DevSecOps solution for your apps on AWS from Snyk DevFeed: [A DevSecOps solution for your apps on AWS from Snyk]() Original publisher: [Read original article]() Author: David Lugo Published: 2023-11-28T05:00:00Z Content type: article Language: en Sources: [Blog RSS Feed | Snyk]() Topics: [DevSecOps](), [Amazon Web Services](), [Shared Responsibility Model](), [Security](), [Cloud](), [CI/CD](), [Microservice](), [Containers](), [DevOps](), [Cloud Native Ecosystem]() Tags: [amazon](), [aws](), [blog](), [ci-cd](), [cloud](), [cloud-native](), [devops](), [devsecops](), [executive](), [megawatt](), [microservices](), [related-content](), [security](), [shared-responsibility-model](), [shift-left](), [snyk-platform]() ### AI overview The article presents Snyk as a solution for adopting DevSecOps with AWS applications. It explains the AWS shared responsibility model and argues that security should be integrated throughout the software development lifecycle, especially as teams rely on microservices, containers, and CI/CD pipelines. ### Source excerpt Learn how Snyk can help you adopt a DevSecOps of continuous security for your apps on AWS. ## Demystifying the AWS shared security responsibility model DevFeed: [Demystifying the AWS shared security responsibility model]() Original publisher: [Read original article]() Author: David Lugo Published: 2023-11-13T05:00:00Z Content type: article Language: en Sources: [Blog RSS Feed | Snyk]() Topics: [Amazon Web Services](), [Shared Responsibility Model](), [Security](), [Application Security](), [Encryption](), [Authentication](), [AWS IAM](), [data]() Tags: [acquisition](), [amazon](), [application-security](), [authentication](), [aws](), [blog](), [cloud-security](), [data](), [developer](), [devops](), [encryption](), [identity-and-access-management](), [megawatt](), [related-content](), [security](), [shared-responsibility](), [shared-responsibility-model](), [snyk-platform]() ### AI overview This article explains AWS's shared security responsibility model. AWS secures the underlying cloud infrastructure, while customers secure their data, applications, configurations, encryption, and identity and access controls within the cloud. It also provides practical areas for strengthening security in AWS environments. ### Source excerpt Learn how AWS's shared security responsibility model works and how Snyk can help you streamline your cloud and application security efforts. [Next page]()