Compliance
Compliant from day one — and improving.
We meet the major data-protection regimes today and are working toward independent security certifications.
Roadmap
| GDPR | Live | EU data-protection compliance from launch. |
| CCPA / CPRA | Live | California consumer privacy rights. |
| DPDP (India) | Live | India Digital Personal Data Protection compliance. |
| SOC 2 Type I | In progress | Independent audit of security controls. |
| SOC 2 Type II | Planned | Observation-period audit, targeted for Q4 2026. |
| ISO 27001 | Future | Information-security management certification. |
How we approach the SOC 2 criteria
Security
MFA, RBAC, encryption, WAF and monitoring.
Availability
99.9% uptime target with monitoring and alerting.
Confidentiality
Encryption and least-privilege access controls.
Privacy
Data minimization and GDPR-aligned handling.
Need a DPA, security questionnaire or compliance documentation? Email security@bounceblock.io.