Compliance

Our Commitment to Compliance

At SecureKeySolutions, we are committed to maintaining the highest standards of compliance with relevant laws, regulations, and industry best practices. We believe that strong compliance is essential for building trust with our customers and ensuring the security and integrity of our products.

This page outlines our approach to compliance across various aspects of our business, from product security to data protection and business operations.

Product Security Standards

Our hardware wallets are designed and manufactured in accordance with rigorous security standards:

Common Criteria (CC) Certification

Our secure elements are certified according to Common Criteria EAL5+ standards, providing assurance that they have been rigorously tested against known security vulnerabilities.

FIPS 140-2 Compliance

The cryptographic modules in our devices comply with Federal Information Processing Standard (FIPS) 140-2 Level 3, ensuring that they meet government standards for cryptographic security.

Secure Development Lifecycle

We follow a secure development lifecycle that includes:

• Threat modeling during design phase
• Static and dynamic code analysis
• Regular security testing and penetration testing
• Third-party security audits
• Responsible vulnerability disclosure program

Data Protection and Privacy

We take data protection and privacy seriously and comply with relevant regulations:

General Data Protection Regulation (GDPR)

Although based in the United States, we comply with the European Union's GDPR for customers in the EU, ensuring:

• Lawful basis for processing personal data
• Data minimization principles
• Respect for data subject rights
• Appropriate security measures for data protection
• Privacy by design and default in our products and services

California Consumer Privacy Act (CCPA)

We comply with the CCPA for California residents, providing:

• Transparency about data collection and use
• Right to access personal information
• Right to deletion of personal information
• Right to opt-out of the sale of personal information

Children's Online Privacy Protection Act (COPPA)

Our services are not directed at children under 13, and we do not knowingly collect personal information from children under 13.

Business Operations

Anti-Money Laundering (AML)

While we do not provide financial services or cryptocurrency exchange services, we are committed to preventing the use of our products for illegal purposes. We maintain appropriate Know Your Customer (KYC) procedures for high-value business customers and report suspicious activities to relevant authorities as required by law.

Export Controls

We comply with U.S. export control regulations, including:

• Export Administration Regulations (EAR)
• International Traffic in Arms Regulations (ITAR) where applicable
• Sanctions programs administered by the Office of Foreign Assets Control (OFAC)

We screen customers against restricted party lists and do not ship our products to sanctioned countries or entities.

Consumer Protection

We adhere to consumer protection laws and regulations, including:

• Clear and accurate product descriptions
• Transparent pricing and billing practices
• Fair warranty terms
• Honest marketing and advertising

Environmental Compliance

We are committed to environmental responsibility in our product design, manufacturing, and packaging:

• RoHS (Restriction of Hazardous Substances) compliance
• WEEE (Waste Electrical and Electronic Equipment) compliance for proper electronic waste handling
• Use of recyclable packaging materials
• Energy-efficient product design

Certifications and Audits

Our commitment to compliance is validated through regular audits and certifications:

• ISO 27001 certification for information security management
• Regular penetration testing by independent security firms
• Annual SOC 2 Type II audits for security, availability, and confidentiality
• Compliance with Payment Card Industry Data Security Standard (PCI DSS) for our e-commerce operations

Reporting Concerns

If you have concerns about our compliance with any laws, regulations, or ethical standards, please contact us:

• Email: [email protected]
• Phone: +1 (817) 966-7376
• Mail: Compliance Officer, SecureKeySolutions, 1031 S Bowen Rd, Arlington, TX 76013, United States

We take all reports seriously and will investigate thoroughly while protecting the confidentiality of those who raise concerns in good faith.