Compliance & GDPR on ComplyPost
ComplyPost handles statutory client mail, so the compliance posture is deliberately boring: UK storage, encryption, logs of everything, and tools to honour data-subject requests.
Where is our data stored?
On UK-based infrastructure, encrypted at rest. Documents never need to leave the UK to be processed.
What does the audit trail record?
Every upload, edit, confirmation, send, view, and download, with who did it and when. The full log can be exported as CSV for supervisors or inspections.
How does ComplyPost help with GDPR?
Subject access export and data deletion tools are built in, retention is configurable, and a Data Processing Agreement is available. You stay the controller; ComplyPost processes on your instructions.
Can I control who on my team sees what?
Yes — role-based access controls what each team member can view and do, and every access is logged.
What happens to documents when we leave?
You can export everything before cancelling, and request deletion of the remainder. Retention controls also let you expire documents on your own schedule while you are a customer.
Related
Still stuck? Email [email protected] and a person will help.