How does Cyber Crucible support Utah's Consumer Privacy Act (UCPA)? Short answer: Cyber Crucible acts as a processor under the Utah Consumer Privacy Act, following the controller's documented instructions under a data processing agreement. Its no-collection design means there is little personal data in its custody for the UCPA's handling and disclosure rules to reach. How it aligns Processor role under contract with the controller. Data minimization — no customer content, credentials, or keys collected. Security safeguards — encryption, access control, and endpoint prevention. Vendor-selection notes The UCPA is generally regarded as more business-oriented than some state peers, but still requires processor contracts and reasonable security; the minimal footprint supports both. Documentation is available on request.