Loading...
FastStaq is built to help you meet privacy obligations like GDPR out of the box: data export, the right to erasure, audit logging, and retention controls.
Users can request an export of their personal data. The export is generated and made available for download (delivered through the secure file pipeline), so you can satisfy data-access requests without manual work.
Deletion is a two-phase flow rather than an instant hard delete:
This protects against accidental loss, allows a cancellation window, and still honors erasure obligations.
Sensitive actions are recorded in an audit log with actor, action, before/after state, and result. In production, strict mode (AUDIT_LOG_STRICT=true) ensures a failed audit write surfaces an error rather than silently dropping the trail, which is what SOC 2 and HIPAA-style controls expect.
AUDIT_LOG_RETENTION_DAYS (default 365) controls how long audit entries are kept; production requires at least 365 days.A set of COMPLIANCE_* flags (and a config/compliance.flags.json baseline) control GDPR features, audit strictness, MFA requirements, and optional HIPAA mode. A production startup guard refuses to boot if these are unsafely relaxed, with an auditable break-glass override.
The cookie consent banner and related disclosures are part of the legal layer. See Legal pages and consent.
Open a support ticket for compliance configuration questions.
Sign in to leave feedback on this article.