Compliance — GDPR, PDPL, PDPA, PDP
Mapped controls and DPAs for the frameworks your auditors care about. We sign and operate to your template.
GDPR (EU) — Regulation 2016/679
- Processor SCCs + TIA, DPA art.28, records of processing, 72h breach notice.
- Data subject rights (access/erase) via
DELETE /v1/users/{{user_id}}.
Saudi PDPL — Personal Data Protection Law (enf. 2024)
- Residency in Jeddah zone, consent management, notification to SDAIA.
- Cross-border transfer impact assessment on request.
Malaysia PDPA 2010 (Act 709)
- 7 principles mapped — notice & choice, retention, security, access.
- Kuala Lumpur zone + local DPA annex.
Indonesia PDP Law No.27/2022
- Lawful basis, 72h breach to Kominfo, Jakarta residency, DPO appointment support.
Need a signed DPA? Email team@tradly.app — we return redlines in 48h and provision your residency zone in parallel.