You decide
- Whether the evidence meets your obligations
- Which open gaps to close first
- Whether your firm is compliant
For California firms that meet the CCPA's thresholds
Compliance: CCPARegulated
Evidence your security is reasonable, before anyone asks.
The CCPA applies to for-profit businesses in California that meet its revenue or data thresholds, and it requires reasonable security for the personal information they hold. Compliance: CCPA gives your firm quarterly evidence of that security, which matters most if a breach ever puts its reasonableness in question.
At a glance
- Package
- Compliance: CCPA
- Evidence
- Compliance Posture Report, quarterly
- Stacks on
- Complete IT: Managed or Co-Managed
Does this apply to you?
It may apply if your firm does business in California and meets one of these:
- Annual revenue above the level the law sets
- Personal information about a large number of California residents
What the rule asks for, and what you receive.
- 01
Provide reasonable security for personal information
The security controls that protect personal information
Evidence of reasonable security for personal information
- 02
Know where personal information lives
Tracking where California residents' personal information is stored
A record of where it lives
- 03
Protect consumers' personal information from unauthorized access
Access and retention controls
Access and retention evidence
We provide the evidence. You decide.
s90 does
- Runs the controls the framework calls for
- Keeps the documentation current
- Delivers a Compliance Posture Report every quarter
The Compliance Posture Report
Scoped to CCPA, delivered every quarter without asking. The proof in your hands is never more than three months old.
Sample · Compliance Posture Report
ACME Corp · Quarter 3 · CCPA
- Evidence of reasonable security for personal information
- Enforced
- A record of where it lives
- Current
- Access and retention evidence
- Current
Sample report for a fictional business. Example figures.
Other frameworks you may answer to.
Bundle discounts available.
One question to ask yourself
If a breach put your security in question, could your firm show it was reasonable?
Up to$500,000Cyber WarrantyBacked by Cork Inc.In 30 minutes, we talk through your setup and you leave knowing which plan fits.
Book a callSee exactly what you'd receive each quarter, by email.
Get the sample Posture Report by email