# How does Cyber Crucible support Utah's Consumer Privacy Act (UCPA)?

**Short answer:** Cyber Crucible acts as a processor under the Utah Consumer Privacy Act, following the controller's documented instructions under a data processing agreement. Its no-collection design means there is little personal data in its custody for the UCPA's handling and disclosure rules to reach.

## How it aligns

- **Processor role** under contract with the controller.
- **Data minimization** — no customer content, credentials, or keys collected.
- **Security safeguards** — encryption, access control, and endpoint prevention.

## Vendor-selection notes

The UCPA is generally regarded as more business-oriented than some state peers, but still requires processor contracts and reasonable security; the minimal footprint supports both. Documentation is available on request.