Compliance at Navixy
At Navixy, we are committed to maintaining the highest standards of compliance with global data protection regulations. Our comprehensive compliance program ensures that we meet and exceed the requirements of various international, national, and industry-specific legal standards.
Key compliance areas
General Data Protection Regulation (GDPR)
As a company operating globally, we fully comply with the EU's General Data Protection Regulation (GDPR). This includes:
- Implementing data protection by design and by default
- Maintaining detailed records of data processing activities
- Conducting Data Protection Impact Assessments (DPIAs) where necessary
- Appointing a Data Protection Officer (DPO)
- Ensuring lawful bases for data processing
- Facilitating data subject rights (access, rectification, erasure, etc.)
California Consumer Privacy Act (CCPA)
For our operations involving California residents' data, we comply with the California Consumer Privacy Act (CCPA). This includes:
- Providing clear information about data collection and use
- Offering opt-out options for data sales (though Navixy does not sell personal data)
- Facilitating consumer rights requests (access, deletion, etc.)
- Maintaining appropriate security measures
SOC 2 Type II
Navixy has completed a SOC 2 Type II audit, performed by an independent third-party auditor against the AICPA Trust Services Criteria. The report is available to customers and qualified prospects upon request under NDA. For full details, see our Security documentation or visit our Trust Center.
ISO 27001
ISO 27001 certification is planned. Our information security practices are aligned with ISO 27001 requirements as part of our ongoing compliance program.
Our compliance measures
Data protection and privacy
- Regular privacy impact assessments
- Privacy by design in all our products and services
- Strict data minimization and purpose limitation practices
- Comprehensive data subject rights management
Security measures
- Advanced encryption for data at rest and in transit
- Regular security audits and penetration testing
- Robust access control and authentication mechanisms
- Continuous security monitoring and incident response procedures
For more details on our security practices, please see our Security documentation.
Vendor management
We carefully select and monitor our vendors to ensure they meet our high compliance standards. For more information, see our Subprocessors page.
Employee training
All Navixy employees undergo regular training on data protection, privacy, and security best practices to ensure company-wide compliance awareness.
Transparency
We are committed to transparency in our data handling practices. Our Privacy Policy and Terms of Service provide clear information about how we collect, use, and protect data.
Staying current
Data protection regulations are constantly evolving. We have dedicated legal and compliance teams that continuously monitor regulatory changes to ensure our practices remain up-to-date.