Compliance That Goes Beyond Paperwork

SOC 2 Type I & Type II

SOC 2 (Service Organization Control 2) is an auditing standard developed by the AICPA that evaluates how organizations manage customer data based on five Trust Services Criteria: s...

ISO/IEC 27001 Information Security Management System

ISO 27001 is the international standard for information security management systems (ISMS). It provides a systematic approach to managing sensitive company information through risk...

Payment Card Industry Data Security Standard

PCI DSS is a set of security standards designed to ensure that all companies that accept, process, store, or transmit credit card information maintain a secure environment. It is m...

General Data Protection Regulation

The GDPR is the EU regulation governing the processing of personal data of individuals in the European Economic Area. It grants individuals rights over their data (access, rectific...

Health Insurance Portability and Accountability Act

HIPAA is a US federal law that sets standards for protecting sensitive patient health information (PHI). It includes the Privacy Rule (who can access PHI), the Security Rule (techn...

Singapore Personal Data Protection Act

The PDPA is Singapore's comprehensive data protection law governing the collection, use, disclosure, and care of personal data by private organizations. It establishes a baseline s...

Brazil's Lei Geral de Protecao de Dados

The LGPD (Lei Geral de Protecao de Dados Pessoais) is Brazil's comprehensive data protection law, heavily inspired by the GDPR. It regulates the processing of personal data by any ...

European Union Artificial Intelligence Act

The EU AI Act is the world's first comprehensive legal framework for artificial intelligence. It classifies AI systems by risk level (unacceptable, high, limited, minimal) and impo...