it33

They were very aware of the direction ahead of the August 2025 announce. From then, there was still over a year of support during the transition: https://forum.mattermost.com/t/mattermost-v11-changes-in-fre...

Our understanding is that the organizations most impacted were those using the unsupported Mattermost commercial version, not the open source version. The commercial version of Mattermost is offered in Docker, K8, etc.

If you look into the license of the Mattermost instance you ran, what is the "Enterprise Edition" (i.e. commercial version that upgrades into paid offering) or under MIT license (open source licensed offering, bundled with GitLab omnibus)?

It's not the open source version, which is Mattermost Team Edition. Here's the full announcement: https://forum.mattermost.com/t/mattermost-v11-changes-in-fre...

It's referenced in the discussion: https://github.com/mattermost/mattermost/issues/34271#issuec...

To answer some of the other questions on this thread, no customer logs nor PII get submitted to the 3rd party service that we use, which is called Descartes: https://www.descartes.com/solutions/global-trade-intelligenc...

We pass name and billing address only.

HN has a lot of people building SaaS and open core companies, so hopefully this thread is a good way to learn about export compliance, which is something we've been doing for many years, though it's gotten extra important in 2022 due to so many new sanctions showing up.

Think of it this way (in a simplified, high level view that doesn't capture all the detail, but intended to share the aesthetic):

1. When you're an early stage company based in the U.S. starting to sell open core licenses or SaaS you typically hire a lawyer to do the legal agreements and help negotiate contracts.

2. If it's a good lawyer, they might talk about "export compliance" and how your company might need to think about doing an assessment on how your product is classified in the context of U.S. export compliance restrictions.

3. If they're a really good lawyer, they may even recommend an export compliance consultant for you to use.

4. After you get your export compliance classification, you're going to need a way to implement the right checks to ensure you're not violating U.S. export compliance laws based on your classification and your customers.

5. You quickly realize you need to buy a tool to do this--not only to check at the time of transaction, but also to alert you if the status of a customer changes (for example, if a customer is added to a list of organizations flagged by public sector organizations).

6. You look at different options, and end up purchasing one and integrating it with your other systems, including Salesforce (sales automation) and Marketo (email automation). In this case, we purchased a subscription to Descartes.

Hopefully that helps share context. Please feel free to ask other questions here.

PS: Here's our ECCN classification for those interested: https://docs.mattermost.com/about/certifications-and-complia...

This was more a blanket error than on specific to an account, tweeted about it just now as it’s hit a number of customers: https://twitter.com/iantien/status/1540039939089367040?s=21&...