How Optiploy protects your people and your information.
The practices behind verification, contracts, privacy and security, in one place for your procurement and security teams.
Vetting
Every professional completes an identity check, a review of Optimizely certifications and experience, and a technical interview with a senior practitioner.
Contracts and records
Standard MSA, SOW and NDA templates, and a clear record of scope and approvals for every engagement.
Security
HTTPS everywhere, a strict content security policy, least-privilege admin access with audit logs, and an annual penetration test.
Privacy
EU data hosting option, standard contractual clauses for transfers, and tools for access, deletion and opt-out requests under GDPR, UK GDPR, CCPA and the DPDP Act.
Compliance status
What is in place and what is planned
Status values are placeholders for the prototype. Confirm each with your counsel and security team before publishing.
| Area | Framework | Status |
|---|---|---|
| Privacy | GDPR, UK GDPR | Confirm |
| Privacy | CCPA / CPRA and US state laws | Confirm |
| Privacy | India DPDP Act 2023 | Confirm |
| Accessibility | WCAG 2.2 AA, European Accessibility Act | Target |
| Security | SOC 2 Type II or ISO 27001 | Planned |