Compliance & security
Privacy by design, from day one.
IdPuur is designed for Latin American and European data protection laws. Here is what is already built and what comes next.
Designed for
LGPD
Brazil
Legal bases for processing, data subject rights and data processing agreements (DPA).
LFPDPPP
Mexico
Privacy notice, consent and ARCO rights.
GDPR
European Union
Hosting planned in the European Union (the Netherlands).
Security controls already built
- Tenant isolation with PostgreSQL Row-Level Security
- Passwords hashed with argon2id
- Tokens signed with Ed25519
- MFA secrets encrypted with HashiCorp Vault
- TOTP MFA
- Append-only audit log
On the roadmap
- ISO 27001 gap assessment
- SOC 2 Type I
- SOC 2 Type II
- Data regions in Brazil and Mexico
IdPuur does not hold any certifications yet. We will publish each milestone here.
Questions about privacy or security? Write to privacidad@idpuur.com