Compliance Center

Our commitment to regulatory compliance and industry standards ensures your data and privacy are protected.

Regulatory Compliance

We adhere to major data protection and privacy regulations to ensure your information is handled responsibly.

GDPR Compliance

General Data Protection Regulation (EU) - We protect the privacy rights of EU residents.

  • ✓ Data Processing Agreements (DPAs) in place
  • ✓ Right to access, rectify, and delete data
  • ✓ Data portability supported
  • ✓ Breach notification within 72 hours
  • ✓ Privacy by design principles

CCPA Compliance

California Consumer Privacy Act - Protecting California residents' privacy rights.

  • ✓ Right to know what data is collected
  • ✓ Right to delete personal information
  • ✓ Right to opt-out of data sales
  • ✓ Non-discrimination for exercising rights
  • ✓ Clear privacy notices

PCI-DSS Compliance

Payment Card Industry Data Security Standard - Secure payment processing.

  • ✓ Level 1 PCI-DSS processors (Square, PayPal)
  • ✓ We never store credit card numbers
  • ✓ Tokenized payment processing
  • ✓ Encrypted payment data
  • ✓ Regular security audits

Industry Standards

Additional compliance for industry-specific requirements.

  • ✓ HIPAA (Healthcare)
  • ✓ SOC 2 Type II (Subprocessors)
  • ✓ ISO 27001 (Information Security)
  • ✓ ADA/WCAG 2.1 AA (Accessibility)
  • ✓ CAN-SPAM Act (Email Marketing)

Data Protection Practices

How we protect your data through technical and organizational measures.

Encryption

Data encrypted in transit (TLS 1.2+) and at rest. End-to-end encryption for sensitive information.

Access Controls

Role-based access control, two-factor authentication, and principle of least privilege.

Data Minimization

We only collect data necessary for service provision and delete it when no longer needed.

Your Privacy Rights

Understand and exercise your data privacy rights.

Right to Access

Request a copy of your personal data

Right to Rectification

Correct inaccurate personal data

Right to Erasure

Request deletion of your data

Data Portability

Receive your data in portable format

Right to Object

Object to certain data processing

Right to Restrict

Limit how we process your data

To exercise your privacy rights, contact us:

privacy@coroposws.com

Compliance Resources

Access our compliance documentation and policies.