Compliance
CNC Insight is designed around industry standards and regulatory requirements so your manufacturing operations can meet their compliance obligations.
Data handling designed around the European General Data Protection Regulation, including data subject rights, consent management, and cross-border data transfer protections.
Practices aligned with the California Consumer Privacy Act requirements for data transparency, consumer rights, and privacy disclosures.
Alignment with Canada's Personal Information Protection and Electronic Documents Act for handling personal information of Canadian users.
Risk management and security controls modeled on the National Institute of Standards and Technology cybersecurity framework.
Information security management practices modeled on the international ISMS standard, with formal certification on our roadmap.
Platform controls built to SOC 2 security, availability, and confidentiality criteria, with formal attestation on our roadmap.
Architecture designed to support International Traffic in Arms Regulations requirements for defense-related manufacturing data.
Support for Export Administration Regulations requirements covering dual-use technology and manufacturing process data.
Support for aerospace quality management system requirements and documentation for AS9100 certified manufacturers.
Platform features support ISO 9001 quality management system requirements including document control and process monitoring.
Designed to support electronic records and signatures requirements for medical device manufacturers and pharmaceutical companies.
Support for Good Practice guidelines in pharmaceutical, biotechnology, and medical device manufacturing environments.
Certification Status
We're transparent about our compliance posture: some frameworks are aligned by design today, while formal certifications are on our roadmap. SAM.gov registration is secured.
SOC 2 Type II
AICPA
Platform controls are built to SOC 2 security, availability, and confidentiality criteria
On Our Roadmap
ISO 27001
ISO
Information security management practices modeled on ISO 27001
On Our Roadmap
GDPR
EU Commission
Data handling designed around European data protection principles
Aligned by Design
NIST SP 800-171
NIST
Controls modeled on NIST guidance for protecting controlled unclassified information
Aligned by Design
Talk to us about your regulatory environment and we'll walk through how the platform supports it.