Compliance
Audits love a small scope.
cloakit shrinks what auditors look at: sensitive data lives in the vault under policy, and everything else holds tokens. Each framework below maps to concrete vault controls — start anywhere.
PCI DSS
Card data tokenized at capture; your systems fall out of cardholder-data scope. Read the mapping →
HIPAA
Purpose-based PHI access with full audit trails. Read the mapping →
GDPR
Minimization, residency pinning, and erasure-ready token lifecycles. Read the mapping →
DPDPA (India)
Reasonable safeguards, purpose limitation, breach-ready audit events. Read the mapping →
Map your framework to the vault.
Bring your auditor’s scariest requirement. We will show where it lands in cloakit.