Compliance System

Compliance & Security
Building Trust Foundation

CultureArk strictly complies with New Zealand and international data protection regulations, ensuring user data security and privacy protection, building a transparent and trustworthy AI cultural service platform.

Compliance Framework

NZ Privacy Act 2020

Fully compliant with all requirements of the NZ Privacy Act 2020, including all 13 Information Privacy Principles (IPPs).

  • Transparent data collection
  • Clear purpose of use
  • Secure storage
  • Access rights guaranteed

GDPR Compliance

Compliant with EU General Data Protection Regulation (GDPR) standards, providing consistent privacy protection for global users.

  • Data minimization
  • User consent mechanism
  • Data portability
  • Right to be forgotten

AI Ethics Guidelines

Following responsible AI development principles, ensuring fairness, transparency, and explainability of AI systems.

  • Algorithm transparency
  • Bias detection & elimination
  • Human oversight
  • Explainability requirements

Security Measures

End-to-End Encryption

All data transmission and storage uses AES-256 encryption standard.

Access Control

Role-based access control (RBAC) ensuring principle of least privilege.

Audit Logging

Complete operation audit logs supporting compliance review and security investigation.

Data Localization

Support for data localization to meet compliance requirements of different regions.

Certifications & Commitments

ISO 27001

Information Security

SOC 2

Service Organization Control

GDPR

EU Data Protection

NZ Privacy

NZ Privacy Act

Compliance Inquiries

For any compliance-related questions, please contact our Data Protection Officer.

[email protected]