Legal

Compliance

doconvoy's approach to compliance, and where to find the documents behind it — Privacy Policy, Data Policy, Cookie Policy, DPA, Sub-processors, Terms, and Security.

Last updated: September 2026

Our approach to compliance starts with the architecture. Content is encrypted in your browser before it reaches us, so we hold ciphertext we can't read, and we erase data by destroying keys. That removes a lot of risk before any policy has to be followed.

We don't hold SOC 2, ISO 27001, or HIPAA certifications today, and we don't claim legal compliance on your behalf. What we provide is a principled architecture, clear data roles, and the encryption, audit trail, and controls you need to handle data responsibly in your own regulatory environment. Third-party penetration testing and an independent audit are on our roadmap.

GDPR

doconvoy is built to support common GDPR expectations: a clear controller–processor split, data minimisation by design, mandatory expiry, the right to erasure through crypto-shredding, and access and portability exports. Our Data Processing Agreement sets out the processing terms, and our Data Policy shows how the design maps to the rules.

CCPA

We do not sell or share personal information, and we offer no financial incentives in exchange for personal information. There is nothing to opt out of, because the selling and sharing never happen.

The documents

  • Privacy Policy — the personal data we handle, the roles we play, your rights, and the limits we're honest about.
  • Data Policy — what actually happens to your data, and how the design maps to data-protection principles.
  • Cookie Policy — the browser storage we use, and why there's no cookie banner.
  • Data Processing Agreement — the terms on which we process personal data for you; part of our Terms of Service.
  • Sub-processors — the providers that process data on our behalf, and where.
  • Terms of Service — the agreement governing your use of doconvoy.
  • Security — how the encryption, access controls, and audit trail work.

For any compliance question, contact privacy@doconvoy.com.