Global Privacy and Consent Management

Strivacity is committed to upholding customer privacy rights and enabling your brand to provide your customers the benefit of these rights. We work hard to ensure you’re well-informed and compliant with the guidelines of these regulations, so you can rest assured your website or portal is not at risk of regulatory fines.

Meeting global privacy standards involves more than just providing features in a product. We believe in giving you , as a Customer Identity and Access Management (CIAM) stakeholder, the necessary guidance and facts for your business to satisfy legal and compliance asks.

The General Data Protection Regulation (GDPR) has paved the way for individuals’ privacy rights. Other jurisdictions are quickly following suit to preserve citizens’ rights. However, it's important for your brand to look beyond just meeting the minimum bar of compliance and realize the additional benefit this provides your customers. They will thank you for it by trusting your brand more and offering loyalty in the form of expanded relationships.

Learn more below about how Strivacity Fusion can shoulder the burden of compliance with the mainstream global privacy standards.

How Strivacity Fusion Helps with GDPR Compliance

Let's get the buzzwords out of the way – Strivacity Fusion is a GDPR-compliant, cloud-based CIAM solution. That was a mouthful! Now to the important part. Our platform helps with GDPR compliance through the following:

• Self-service consent management
• Personal data export
• Full self-service management capabilities, providing coverage of all major areas, including:
  Right to be informed

  Right to stop processing

  Right to data portability

  Right to restrict processing

  Right to access

  Reject automated decisions

  Right to correction

  Right to be deleted
• Support of the Kantara Initiative, providing consent receipt specification.
• Anonymization of customers’ PII that may be distributed across your CIAM user directories or databases
• Anonymization of customers’ PII that may exist across event logs across your CIAM infrastructure

Who is affected by CCPA?

Any for-profit company doing business in the state of California and meets one of the following requirements is affected by CCPA:

• Has gross revenues of greater than $25 million USD
• Annually shares, buys, sells and/or receives personal information of more than 50,000 consumers, households and/or devices for commercial purposes
• Derives 50 percent or more of its annual revenues from selling consumers’ PII

How Strivacity Fusion Helps with CCPA Compliance

Here are more buzzwords for you. Strivacity Fusion is an CCPA-compliant, cloud-based CIAM solution. Our platform helps with CCPA compliance through the following:

• Self-service consent management
• Defining and managing consents, consent for data processing purposes and user attributes per consent.
• Full customer identity management so brands can individually remove customers if required
• Support of the Kantara Initiative, providing consent receipt specification
  • The following are consent-controlled based on customer preference:
    • Customer identity provisioning to third-party systems
    • Sharing of identity attributes via federation
    • Customer management of information during registration
• Anonymization of customers’ PII that may be distributed across your CIAM user directories or databases
• Anonymization of customers’ PII that may exist across event logs and your CIAM infrastructure

The Truth Behind the Penalty for Non-Compliance

Whether you’re concerned about meeting a specific privacy standard or simply want to increase customer trust and loyalty to your brand, Strivacity Fusion provides full self-service consent management, empowering your customers without increasing customer acquisition or management costs to your business.

Self-service consent management gives customers the ability to manage their consent preferences, exercise their right to be forgotten and download all the data an organization has about them, without needing to wait on hold in a help desk queue.

Strivacity Fusion’s self-service consent management is directly based on the GDPR consent design guidelines and supports the Kantara Initiative’s consent receipt specification.

We provide the ability to fully integrate self-service consent management into your existing website or portal. Strivacity Fusion provides mechanisms to give customers the ability to choose and control the following:

• When and how their personal data is shared with other systems via federation support
• Which consents they permit to be used during registration, and how their data may be used on a restricted basis by other applications
• Viewing and downloading all of their data in a way in which they can understand and/or import into other applications
• To exercise their right to be forgotten, which supports both automated or manual deletion processes

Strivacity Fusion is designed and built around our philosophy and approach of isolation-by-design, meaning every single brand that utilizes our platform is operated and managed on its own dedicated infrastructure.

Why Should I Care About Isolation-by-Design?

We’re striving to break down the barriers of cloud adoption for CIAM, especially for highly regulated industries.

Strivacity Fusion is 100 percent cloud-based, leveraging all of the advantages of today's progressive cloud technologies by providing reliability, scalability and redundancy without the downsides of multi-tenancy and/or shared infrastructure.

That's why we’ve taken our isolation-by-design principles and philosophy and applied them to Strivacity Fusion.

It doesn’t matter how large your company or your customer base is – every company and its customers should be safeguarded by the same levels of security and privacy. This is a table-stakes requirement to modern commerce.

• 100 percent cloud-based with all of the benefits of a leading cloud offering, which are as follows:
  • Subscription-based licensing model
  • High availability
  • Infinite scale
  • Turn-key evaluation or production instances available in several minutes.
• Zero shared infrastructure between brands (unless you have multiple brands – we can help there)
• Zero shared datastore between the brands we support
• Zero shared repositories of secrets between the brands we support

Want to know more? We’d be happy to tell you how we do it.