Compliance & Security

Last updated: September 8, 2026

1. Our Approach to Compliance

We're transparent about where we are on the compliance journey. We don't claim certifications we haven't earned. As the platform grows, we'll update this page with any certifications we complete.

2. Data Security

SuuSri is designed with security as a foundation:

• Secrets live in server-side environment variables — never in frontend code.
• Every API key is bound to a verified domain via a suusri.json handshake file.
• Authentication gates every dashboard route.
• Conversations are tied to your authorized site.

3. CCPA / CPRA

We respect the privacy rights of California residents. If you have questions about accessing or deleting your personal information, contact us at [email protected].

4. Payment Processing

SuuSri does not store or process credit card information directly. Payment processing is handled by a PCI-compliant payment processor.

5. Export Controls

SuuSri complies with applicable export control laws and regulations.