Trust and Compliance
Compliance, stated plainly
US procurement and regulated buyers look for compliance first. Here is where Corpshore US stands, presented honestly as held, in progress or roadmap. We do not claim a certification we do not hold.
Healthcare
HIPAA-compliant operations
Privacy
CCPA aligned
Headquarters
St. Petersburg, FL
HIPAA
HIPAA-compliant operations for healthcare clients, with Business Associate Agreements available and documentation on request.
CCPA and state privacy
CCPA aligned data handling, including a clear consumer-rights and do-not-sell-or-share path, with awareness of CPRA and newer state acts.
SOC 1 and SOC 2
Presented accurately as held, in progress or roadmap. See the posture below and confirm current status with our team.
PCI DSS
Applied where payment-card data is handled. Confirm scope with our team for payment-handling engagements.
Section 508 and WCAG
Section 508 and WCAG 2.2 AA accessibility for public-sector work and accessible delivery.
Data governance
Documented, auditable data governance with North American management oversight across every engagement.
Compliance posture
We present each item accurately. Held means in place today. Capability means a documented, operational capability. In progress and roadmap mean planned.
Confirm current status and request documentation from our team.
- HIPAACapability
- CCPAAligned
- SOC 1Roadmap
- SOC 2Roadmap
- PCI DSSRoadmap
- Section 508Capability
How we handle your data
Protection is built into how teams are set up and how they work, not added on afterwards.
Least-privilege access
People see only the data their role requires, enforced through access controls and reviewed regularly. Access is removed when it is no longer needed.
Trained, supervised teams
Every team member is trained on data handling for your sector, with North American management oversight and clear escalation paths.
Data minimization
We collect and retain only what the work requires, and follow agreed retention and disposal rules so data does not linger past its purpose.
Documented response
Rights requests, incidents and documentation requests follow a defined process, so you get a clear answer and an auditable trail.
Consumer rights and BAAs
Exercise your CCPA rights, request a do-not-sell-or-share, or request a Business Associate Agreement or compliance documentation. Email us and we will route your request.
Build your team with Corpshore US
Tell us what you want to outsource and we will map a team, a model and a timeline. North American accountability, global delivery.
We respond to every US inquiry within 6 hours.