I have in the past struggled with developing services for a company. Especially guaranteed privacy, uptime, etc. I imagine using open models makes it even more difficult even if it's local.

Beyond process modelling or back up servers. Do you have an approach to this that helps keep you compliant some how?

Sorry probably a big topic and hard to tackle.