Sorry for the snark, but this seems like a thinly veiled attempt at a troll
The biggest concern is the complete lack of transparency in why the account was suspended; was I hacked and I need to protect other things? Was my customer data accessed? I haven't the faintest idea, which is a helpless feeling.
I had planned for outages, disconnects, etc, but literally EVERYTHING is behind the Heroku login; because I never considered anything I was doing remotely bad, I never considered I'd be suddenly unable to login to every 3rd party backup service, access environment variables, etc.
Think of it like this, when you are doing your accounting you don’t put everything on a single line item, you separate by customer to understand where your profit and losses are occurring. Same with service accounts
Credit cards should never be linked across accounts thanks to PCI-DSS complince
Same IP ban is also not likely unless you are actually doing nefarious things across multiple accounts. I am also making the assumption you are connecting from some business account and not a residential ISP, though that is changing thanks to covid. FWIW, I have worked at many companies where offices of 300-500 proxy outbound traffic to a single IP, that’s why I don’t believe this is a concern.
The ultimate problem is when you have several logical partition but no billing partition. Also the large marketing firm I worked at had zero phone support with Facebook and Google, yet we did this all day (with a single IP address).
This all boils down to one common thread: you should be taking advice from a lawyer on whether the terms prevent such actions and to have a business continuity plan. If the vendor does something egregious, like shutdown all accounts, then your lawyer can ship them a nice letter which will get their attention
Afaik, PCI-DSS doesn't prevent you to store cryptographic hashes of card. Therefore cards still could be linked with hashes.
I think this is key.
> Same IP ban is also not likely (...)
Thanks for answering! I had no idea.