Compliance has two sides here: how AppCompliance itself complies with the rules that govern us, and how AppCompliance helps your team comply with the rules that govern your apps. This page covers both, without badges we have not earned.
How we comply
- GDPR is our floor, not our ceiling: EU infrastructure, EU vendors (Stripe excepted for payments), data minimization by design, and binaries that are destroyed right after each scan.
- For the builds you upload and the findings we produce, we act as your processor under a data processing agreement, available before you buy anything.
- Our sub-processor list is public on the EU-first data handling page and changes only with notice.
- Data subject requests (access, correction, deletion, portability) are handled within the statutory month, usually much faster: info@appcompliance.io.
What we deliberately do not claim
No SOC 2 or ISO 27001 certification yet, and no compliance guarantees for your app: we prove what a machine can prove from your build, and approval decisions stay with Apple and Google. Any tool promising you certified compliance or guaranteed approval is not being straight with you. Our security practices are documented in full on the security page, and we answer security questionnaires honestly and fast.
How we help your compliance
- Every scan checks the technical declarations regulators and stores care about: privacy manifests, data collection versus what your app declares, encryption declarations, permissions.
- Every finding carries evidence pulled from the binary, so your answer to an auditor is a document, not a recollection.
- The sealed scan record proves exactly what you shipped and when, per release, exportable as PDF, SARIF or SBOM.
- Agencies can hand each client a white-labeled view of their own compliance trail.
The paperwork, on request
Data processing agreement, sub-processor list, security documentation and a filled-in security questionnaire: mail info@appcompliance.io and expect the documents within one business day. A vendor that answers these questions slowly is telling you something.