Compliance & Certifications

RecGenz is fully committed to GDPR compliance, ensuring the protection of personal data for all EU citizens and residents.

• Lawful, fair, and transparent data processing
• Purpose limitation and data minimization
• Data accuracy and storage limitation
• Integrity and confidentiality (security)
• Accountability and governance
• Data Protection Impact Assessments (DPIAs)
• Data Processing Agreements (DPAs) with all sub-processors
• 72-hour breach notification protocol
• Appointed Data Protection Officer: dpo@recgenz.com

We comply with CCPA requirements, providing California residents with enhanced privacy rights and transparency.

• Right to know what personal information is collected
• Right to delete personal information
• Right to opt-out of the sale of personal information
• Right to non-discrimination for exercising CCPA rights
• Transparent data collection notices
• Verified consumer request process
• Annual privacy policy updates

Our infrastructure and processes are SOC 2 Type II certified, demonstrating our commitment to security, availability, and confidentiality.

• Security: Systems are protected against unauthorized access
• Availability: Systems are available for operation and use
• Processing Integrity: System processing is complete and accurate
• Confidentiality: Information designated as confidential is protected
• Privacy: Personal information is collected and used appropriately
• Annual third-party audits and assessments
• Continuous monitoring and improvement

For healthcare AI projects, we implement HIPAA-compliant safeguards to protect Protected Health Information (PHI).

• Administrative safeguards and security management
• Physical safeguards for data centers and access controls
• Technical safeguards including encryption and audit controls
• Business Associate Agreements (BAAs)
• Employee HIPAA training and awareness
• Incident response and breach notification procedures
• Minimum necessary use and disclosure principles

Our security practices align with ISO 27001 standards, implementing an Information Security Management System (ISMS).

• Information security policies and procedures
• Asset management and classification
• Access control policies
• Cryptography and key management
• Physical and environmental security
• Operations security and communications security
• Supplier relationship security management
• Security incident management

We establish comprehensive Data Processing Agreements (DPAs) with all clients and incorporate Standard Contractual Clauses (SCCs) for international data transfers.

• Clear definition of data processing scope and purposes
• Standard Contractual Clauses for EU data transfers
• Sub-processor management and approval process
• Data subject rights assistance
• Security incident notification commitments
• Data retention and deletion schedules
• Audit rights and compliance verification