Glossary
Compliance
Meeting regulatory, security, and contractual requirements for operating a product or service.
Compliance covers adhering to laws, standards, and customer requirements—e.g., GDPR, CCPA, SOC 2, ISO 27001, or industry rules like HIPAA.
Effective programs combine policies, controls, testing (internal audit), and evidence management. They intersect with security, privacy, and finance teams and often require attestations or reports for customers.