Compliance

How Akarguard meets its regulatory and industry-standard obligations.

Frameworks & Standards

EU GDPRCompliant

EU General Data Protection Regulation

We operate in full compliance with Regulation (EU) 2016/679. Personal data is processed only on lawful bases (Art. 6), transparent information notices are provided (Arts. 13–14), data subject rights (Arts. 15–22) are fully supported, automated decision-making disclosures are in place (Art. 22), breach notifications follow the 72-hour rule (Art. 33–34), and international transfers rely on Standard Contractual Clauses (Art. 46). Data Processing Agreements (Art. 28) are available on request.

CCPACompliant

California Consumer Privacy Act

Akarguard respects the rights of California residents under the CCPA. We do not sell personal information. Consumers may exercise their rights to know, delete, and opt-out by contacting privacy@akarguard.net.

Privacy by DesignImplemented

Privacy by Design & Default

Privacy considerations are embedded into our engineering and product processes from the design stage, not added as an afterthought. Data minimisation, pseudonymisation, and access controls are built into every component of our platform.

BCP38Implemented

BCP 38 — Network Ingress Filtering

We implement BCP 38 (RFC 2827) ingress filtering at our reverse-proxy edge to reject spoofed IP source addresses. This is network hygiene, not a volumetric-scrubbing claim: it prevents our edge from being abused as a reflection/amplification source and rejects spoofed-source packets. Akarguard is a Layer 7 (application-layer) service and does not sell L3/L4 volumetric scrubbing.

RFC 2827 →

Security & Privacy Practices

Data minimisation: we collect only what is strictly necessary, and this website sets no tracking cookies
Encryption in transit (TLS 1.2+) and at rest: the database sits on a LUKS/AES-256 volume with encrypted nightly backups; passwords stored only as bcrypt hashes
Reverse-path / ingress filtering (BCP 38 / RFC 3704) enabled at the edge to reject spoofed-source packets
Two-step sign-in: password plus a one-time code emailed to the account, and email confirmation required at signup
Role-based access control: each account sees only its own domains, rules, logs and API keys (tenant isolation)
Append-only audit trail for every administrative change (who, what, and the request IP), retained 12 months
Rate limiting on sign-in and authentication endpoints to resist credential-stuffing and abuse
Automatic log retention: raw edge access logs rotated after 7 days; aggregated metrics kept 90 days
Data Processing Agreement (DPA) available on request for customers who need one

Data Processing Agreement (DPA)

If your use of Akarguard involves the processing of personal data on your behalf, we will enter into a Data Processing Agreement in accordance with Art. 28 GDPR. Please contact privacy@akarguard.net to request a DPA.

Compliance enquiries

For compliance-related questions, contact privacy@akarguard.net

Keep your site up
on its worst day.

€9.90 a month, €1 for each extra domain, every feature included, 7 days free. One DNS change to start.

Start Free Trial Contact Us