Compliance · OpsIQ

Compliance — OpsIQ

OpsIQ is committed to data protection, security, AI governance, and regulatory readiness. Our approach ensures compliance that can be verified, with a focus on security by design, privacy alignment, and governed AI. We maintain an honest roadmap regarding our compliance status.

Key Compliance Areas:

1. Our Approach to Compliance: Privacy and security are integral to our product. We are currently aligned with GDPR, UK GDPR, and CCPA/CPRA, and we transparently communicate our progress on certifications like SOC 2 Type II and ISO/IEC 27001.
2. GDPR & UK GDPR: OpsIQ is fully aligned with GDPR and UK GDPR, ensuring that we handle personal data responsibly and in compliance with these regulations.
3. CCPA / CPRA: For California residents, OpsIQ acts as a Service Provider, processing personal information solely for business purposes and supporting consumer rights requests.
4. ePrivacy & Cookies: We provide a Data Processing Addendum (DPA) that includes EU Standard Contractual Clauses (SCCs) and the UK International Data Transfer Addendum (IDTA).
5. Security Program: Our security measures include AES-256 encryption, TLS 1.3 for data in transit, role-based access control (RBAC), two-factor authentication (2FA), and comprehensive audit logging.
6. Responsible & Governed AI: We do not train AI models on customer data, allowing customers to choose their AI provider while ensuring human oversight for consequential actions.
7. Data Residency & Retention: Customers can control data residency and retention settings, with options for EU hosting and self-hosted solutions.
8. Sub-processors: We engage a limited number of vetted sub-processors, ensuring they adhere to data protection standards equivalent to our own.
9. Breach Response & Notification: We have established procedures for detecting and responding to security incidents, ensuring timely notification to affected customers.
10. Self-hosted Compliance Posture: Customers using our self-hosted option have full control over their infrastructure and data compliance.
11. Accessibility: We strive for compliance with WCAG 2.1 AA standards and continuously improve accessibility.
12. Certifications & Roadmap: We are aligned with GDPR, UK GDPR, and CCPA/CPRA today, with SOC 2 Type II and ISO 27001 certifications in progress.
13. Vulnerability Disclosure: We encourage reporting of security vulnerabilities and commit to good-faith, coordinated disclosure.

For more detailed information, including documentation requests, please visit our Trust Center or contact us directly.