How does Cyber Crucible support the Colorado Privacy Act (CPA)?

Short answer: Cyber Crucible operates as a processor under the Colorado Privacy Act, bound by a data processing agreement to follow the controller's instructions, assist with security, and support consumer rights. Because it collects essentially no personal data, most CPA obligations have minimal surface in its custody.

How it aligns

• Processor role with contractually limited processing.
• Security assistance and breach support to the controller.
• Support for consumer rights by not holding the personal data that would otherwise be in scope.

Vendor-selection notes

The CPA requires data-protection assessments for higher-risk processing and honoring universal opt-out mechanisms at the controller level; the minimal footprint keeps the vendor side simple. Documentation is available on request.