BELA
Home › Compliance
Compliance roadmap

Compliance, stated honestly

Trust is earned by being transparent. Below is exactly where BELA stands on each framework — what is in place today, what is underway, what is planned, and what we have not assessed at all. We will never claim a certification we do not hold.

Frameworks

Live status, updated as we progress.

Data-protection practices

Privacy-by-design and data minimisation are built into the platform. You can correct your own account details in the product. Access, export and erasure of your account data are carried out by us on request — erasure replaces the personal data in your account with values that no longer identify you and keeps the records the law requires, such as invoices and the audit trail.

In place today
GDPR

BELA has not completed a GDPR assessment and does not claim GDPR compliance. Our first markets are India and the United States. If you need to evaluate BELA for the EU, contact us and we will tell you exactly where we stand.

Not assessed
SOC 2 Type II

Controls are being formalised ahead of an independent audit. Timeline shared with enterprise prospects under NDA.

In progress
ISO 27001

Information security management system being established against the standard.

Planned
HIPAA

For healthcare workloads. On the roadmap; contact us if this is a requirement for your evaluation.

On the roadmap
Data residency options

Regional data hosting to meet sovereignty requirements.

On the roadmap

How to read this page

“In place today” means the practice is implemented and in use. “In progress” means work is actively underway. “Planned” and “On the roadmap” mean committed but not yet started or scheduled. “Not assessed” means exactly that — we have not evaluated BELA against that framework and make no claim about it. If your procurement process needs a specific artefact or timeline, contact us and we will share what we can.

Evaluating BELA for a regulated environment?

Tell us your requirements and we will map them to our roadmap and share documentation under NDA.