Skip to main content

How does Cyber Crucible support Utah's Consumer Privacy Act (UCPA)?

Short answer: Cyber Crucible acts as a processor under the Utah Consumer Privacy Act, following the controller's documented instructions under a data processing agreement. Its no-collection design means there is little personal data in its custody for the UCPA's handling and disclosure rules to reach.

How it aligns

  • Processor role under contract with the controller.
  • Data minimization — no customer content, credentials, or keys collected.
  • Security safeguards — encryption, access control, and endpoint prevention.

Vendor-selection notes

The UCPA is generally regarded as more business-oriented than some state peers, but still requires processor contracts and reasonable security; the minimal footprint supports both. Documentation is available on request.

Back to top