Compliance, Privacy & Data Sovereignty

As an enterprise-grade security platform, Vertueal Password Manager is built to satisfy international privacy regulations, including the European General Data Protection Regulation (GDPR), the South African Protection of Personal Information Act (POPIA), and the California Consumer Privacy Act (CCPA).

---

The Cryptographic Privacy Model

Under traditional cloud software architectures, privacy depends entirely on administrative access controls, employee non-disclosure agreements, and database permissions.

Vertueal replaces administrative trust with Cryptographic Guarantees:

• Zero Plaintext Ingestion: Vertueal servers never ingest, process, or store unencrypted passwords, notes, credit card numbers, or encryption keys.
• Subpoena Immunity: If Vertueal is legally compelled to deliver account data, we can only provide encrypted ciphertext blobs and salts. We do not possess the mathematical capability to decrypt customer records.

---

Regulatory Alignment

1. GDPR (EU) Compliance

• Article 32 (Security of Processing): Compliant via state-of-the-art AES-256-GCM encryption and isolated thread processing.
• Article 17 (Right to Erasure / "To Be Forgotten"): Users can irrevocably delete their entire account via Settings > Security > Delete Vault Account. Deleting an account executes an immediate, irreversible cascade purging the user's Vault, UserDevice, and notification configurations.
• Article 25 (Data Protection by Design and by Default): Zero-knowledge architecture guarantees that privacy is the default technical state.

2. POPIA (South Africa) Compliance

• Condition 7 (Security Safeguards): Compliant with statutory requirements to prevent unauthorized loss, damage, or destruction of personal information.
• Section 24 (Correction or Deletion of Personal Information): Complete self-service management and export capabilities.

---

Data Retention Policies

---

Data Export & Portability

You are never locked into the Vertueal ecosystem. You can export your unencrypted vault at any time:

1. In the sidebar, navigate to Settings > Vault Export.
2. Enter your master password to decrypt your vault in memory.
3. Choose your preferred export format:
   • JSON (Full structured backup including notes, tags, and folders)
   • CSV (Compatible with standard spreadsheet tools and other password managers)
4. Click Download Export File.