--- title: CloudMask Compliance | End to End Encryption | CloudMask description: An in-depth look at how CloudMask security solution keeps you compliant with privacy laws, industry regulations, as well as internal policies. Currently, keeping 100,000 users compliant. --- [![CloudMask - Data protection under breach](https://www.cloudmask.com/hs-fs/hubfs/Horizontal-larger-text.png?width=223&height=40&name=Horizontal-larger-text.png "CloudMask - Data protection under breach")](https://www.cloudmask.com) - [For Business](https://www.cloudmask.com/business) - [For Enterprise](https://www.cloudmask.com/enterprise) - [For Developers](https://www.cloudmask.com/saas-developers) - Resources - [Blog](https://www.cloudmask.com/blog) - [Videos](https://www.cloudmask.com/videos) - [Help](http://help.cloudmask.com) # Compliance ## Privacy Laws Privacy laws may require organizations to store private data within the applicable jurisdiction’s borders. Depending on the jurisdiction, such data residency, or data sovereignty, requirement is intended to ensure that private data does not fall under foreign laws. CloudMask replaces sensitive data with meaningless tokens, while encrypting the sensitive data using best-of-breed and the strongest available encryption algorithms. As a result, the private data never leaves the user’s machine, instead tokenized and encrypted data which does not disclose any of the original data is transmitted and stored over the network.    [**Learn More**](https://www.cloudmask.com/blog/privacy-regulation) ![application.png](https://www.cloudmask.com/hs-fs/hubfs/Imported_Blog_Media/Law_Keyboard.jpg?width=320&height=218&name=Law_Keyboard.jpg) ## General Data Protection Regulation (GDPR) ![Industry Regulations](https://www.cloudmask.com/hs-fs/hubfs/GDPR.jpg?width=320&height=213&name=GDPR.jpg) The European Union General Data Protection Regulation (GDPR) are expected to come into force in 2018. > The regulation will apply to companies handling data from customers in the EU, regardless of where the companies are based. Potential fines are up to four percent of global revenue or 20 million Euros, whichever is higher, for companies that break the rule. CloudMask [Dynamic Data Masking (DDM)](https://www.cloudmask.com/ddm), pseudonymised and encryption of personal data. The application satisfies the [GDPR](https://www.cloudmask.com/gdpr) requirement for technical data protection measures. When a data breach exposes your data, it will be unintelligible to the unauthorized individual, and you will not have to notify the subjects of the data breach. With CloudMask you are compliance with GDPR and avoid Fines and Breach Notifications. [Learn More](https://www.cloudmask.com/gdpr) ## Industry Regulations Depending on the sector, various Industry regulations require organizations to take precautionary measures to protect certain data when it is processed and stored. Examples include PCI DSS for retail, HIPAA for healthcare, GLBA for financial institutions, and ITAR for Manufacturing. CloudMask enables organizations to meet these regulations through strong encryption, access control and auditing. By relying on user-based certificates, organizations can ensure a higher degree of authentication, and non-repudiation, thus a finer access control. In addition, CloudMask enforces policy driven access control backed by a secure audit which monitors data processing activities and supports versioning and tracking of data changes.    [**Learn More**](https://www.cloudmask.com/blog/part-4-data-compliance-challenges) ![Organizational Policies and Governance](https://www.cloudmask.com/hs-fs/hubfs/legal%20ethics%2001.jpg?width=320&height=171&name=legal%20ethics%2001.jpg) ## Organizational Policies and Governance ![Organizational Policies and Governance](https://www.cloudmask.com/hs-fs/hubfs/Eye.jpeg?width=320&height=240&name=Eye.jpeg) Independent of external regulations, organizations develop internal policies to improve governance and mitigate risks. While this is true for traditional applications, it poses further challenges with the increased adoption of cloud applications. CloudMask enforces organizational policies by integrating with existing security framework and allowing administrator/owners to configure controls that can be applied across all applications. Access rights and group sharing controls are based on the application, type of data, and the role of its creator. Thus allowing the organization to address specific needs – whether internal or driven by third party – on a granular level. # See the Potential with End-to-End Encryption for Google **By clicking this button, you agree to our [terms of service](https://www.cloudmask.com/terms-of-service).** ### **Your Browser Will Be Supported Soon** **CloudMask works on [Chrome](http://www.google.com/chrome)and [Firefox](https://www.mozilla.org/en-US/firefox/new) browsers. We will let you know once your browser is supported.** - [About Us](https://www.cloudmask.com/about) - [Pricing & Plans](https://www.cloudmask.com/subscription-plans/) - [Partners](https://www.cloudmask.com/about/cloud-partners/) - [Get in touch with us](https://www.cloudmask.com/contact-us)  **CloudMask Inc.** [+1 (819) 282-1501](tel:1%20(819)%20282-1501)[+1 (866) 202-4443](tel:1-866-202-4443) - What We Protect - [For Business Users](https://www.cloudmask.com/business) - [For Enterprise](https://www.cloudmask.com/enterprise) - [For Developers](https://www.cloudmask.com/saas-developers) - Who We Help - [Legal](https://www.cloudmask.com/e2ee-for-legal-sector) - [Financial](https://www.cloudmask.com/e2ee-for-financial) - [Healthcare](https://www.cloudmask.com/e2ee-for-healthcare) - [Education](https://www.cloudmask.com/e2ee-for-education) - Resources - [Help & Support](http://help.cloudmask.com) - [Blogs](https://www.cloudmask.com/blog) - [News](https://www.cloudmask.com/news) - [Videos](https://www.cloudmask.com/videos) [![Cloudmask](https://www.cloudmask.com/hs-fs/hubfs/CloudMask_Aug2016/CM-Logo-200-50.png?width=200&height=50&name=CM-Logo-200-50.png "Cloudmask")](https://www.cloudmask.com/) © 2012-2018 CloudMask All Rights Reserved