How does Cyber Crucible support the Connecticut Data Privacy Act (CTDPA)?

Short answer: Cyber Crucible operates as a processor under the Connecticut Data Privacy Act, bound by a data processing agreement to act on the controller's instructions and to assist with security and data-subject requests. Because it collects no customer content, credentials, or keys, most CTDPA obligations have little surface in its custody. 
 How it aligns 
 
 Processor role with contractually limited processing and a duty to assist the controller. 
 Data minimization — no customer content, credentials, or keys collected. 
 Security assistance and breach support to the controller. 
 
 Vendor-selection notes 
 The CTDPA requires controllers to bind processors by contract, honor universal opt-out signals, and run assessments for higher-risk processing; the minimal personal-data footprint keeps the vendor side simple. A data processing agreement is available from dpo@cybercrucible.com .