Privacy & Trust Foundation
Baseline privacy notices, lawful bases, data subject rights and the public trust presence.
TRUST-05 · Compliance Center
An honest view of where we stand
We state what is in place today and what is still in progress. casaios does not claim certifications it does not hold, and no compliance content is published without review and sign-off.
Framework alignment
Status reflects the current internal assessment, not an independent audit opinion.
| Framework | Status | Notes |
|---|---|---|
| GDPR (EU 2016/679) | Available | Processing records, lawful bases and data subject request workflow in place. |
| EU AI Act readiness | In preparation | Risk classification and transparency obligations mapped per AI feature. |
| ISO/IEC 27001 | In preparation | Control gap assessment running; certification not yet held. |
| SOC 2 Type II | Planned | Readiness assessment scheduled after the ISO control baseline is stable. |
| TISAX | Planned | Evaluated on customer demand in the automotive segment. |
This page is maintained by casaios and is not a certification, audit report or independent verification.
Workstream progress
The five trust workstreams that structure our compliance roadmap.
Data Lifecycle & Retention
Data classification, retention schedules, deletion workflows and export guarantees.
Consent & Privacy Management
Consent capture, cookie governance and preference management without dark patterns.
Security Center
Technical and organizational measures, incident response and vulnerability disclosure.
Compliance Center
Framework mapping, evidence management and enterprise procurement readiness.
Procurement and vendor assessments
We answer security questionnaires, provide the TOMs and sign a DPA as part of the enterprise onboarding process.