CCPA / CPRA
Protocols.
How Authepy's data processing architecture is designed to support CCPA and CPRA requirements when acting as a service provider or processor for customers.
Our Designation as a Service Provider
Under the CCPA and CPRA, businesses must establish appropriate controls for vendors and service providers handling personal information. Where the applicable contractual and legal requirements are satisfied, Authepy processes customer data in a service-provider capacity and uses end-user information to provide the requested OTP infrastructure.
No Sale or Sharing of Data
Authepy does not sell personal information or use customer end-user data for advertising or cross-context behavioral tracking. Personal information is processed to provide, secure and operate the Authepy service.
Programmatic Data Destruction
Authepy applies defined retention periods to operational routing logs. Relevant metadata is automatically purged according to the applicable retention policy, reducing the amount of consumer-related information retained on the service.
Handling Consumer Rights Requests
When a customer receives a consumer rights request, Authepy's data-minimization architecture reduces the amount of end-user information retained on the service. Verification data is processed transiently, while applicable operational metadata is subject to defined retention and deletion controls.