Privacy / Global laws
Meet privacy laws,
market by market.
Selling across borders means answering to several privacy laws at once. We map them onto one control set, so you build once and comply widely.
What it requires
The laws your
markets run on.
Each law has its own rights, timelines and notices. The spine is the same, and we map the differences.
PDPL
Personal data protection laws across the Gulf, including Saudi Arabia and the UAE.
PIPL
China's Personal Information Protection Law, with strict transfer rules.
CCPA and CPRA
California's consumer privacy rights, including opt out of sale.
LGPD
Brazil's General Data Protection Law, modelled on GDPR.
PIPEDA
Canada's federal private sector privacy law.
How we get you there
One spine,
many markets.
Map your markets
We list the laws that apply to where your customers and data sit.
Build one control set
A single set of notices, consent and rights, with per market differences layered on.
Deploy and localise
Rights and consent go live, localised where a market demands it.
Track the changes
We watch each law and push the changes you need.
Packages
One package,
every market.
Add markets as you grow. The multi-framework discount means you do the shared work once.
See packagesQuestions
Global privacy, in your words.
We sell in several countries. Do we need a programme per law?
No. We build one control set and map each law's specific rights and timelines onto it, so you run a single programme.
Which law is strictest?
It depends on your data and markets. PIPL and GDPR tend to set the high bar. We design to the strictest that applies, so the rest follow.
Can you handle data residency requirements?
Yes. We design storage and transfer so each market's residency and transfer rules are met.
Privacy. Security. Intelligence.
Built for trust.
Tell us what you need to prove. We reply within one working day.