Compliance & Certifications

Last updated: February 14, 2026

1. SOC 2 Type II

SuuSri is currently undergoing an audit for SOC 2 Type II compliance. We expect to complete the audit by Q3 2026. This report demonstrates our controls relevant to security, availability, and confidentiality.

2. HIPAA

SuuSri offers a HIPAA-compliant version for healthcare customers. Business Associate Agreements (BAAs) are available upon request for qualifying Enterprise plans.

3. CCPA / CPRA

We are fully compliant with the California Consumer Privacy Act (CCPA) and the California Privacy Rights Act (CPRA). California residents have the right to request access to and deletion of their personal information.

4. PCI DSS

SuuSri does not store or process credit card information directly. All payments are processed by Stripe, a PCI Service Provider Level 1 certified payment processor.

5. Export Controls

SuuSri complies with applicable US export control laws and regulations.