Skip to content
BrokerShield

Stay DROP‑compliant without sending us your data

BrokerShield helps small and mid-size data brokers keep their state registrations current, run every California DROP deletion cycle on their own machines, and keep tamper-evident evidence ready for audits.

Get a free Registry Gap Check Book a call

General information, not legal advice.

One DROP cycle, as an example 45 days
Day 1
Pull the hashed deletion lists from DROP
Day 2
Standardize, hash and match on your machines
Day 3
You approve the status file; it's uploaded
Day 45
Access DROP again, at the latest

Your data never leaves your systems

Matching happens where your records already live. DROP gives you hashed identifiers; BrokerShield hashes your records the same way and compares the two on your machine.

Your systems

  1. 1Your records stay in your databases and files.
  2. 2They're standardized and hashed with CalPrivacy's published rules (SHA-256 over UTF-8 standardized values, Base64 output).
  3. 3Hashes are matched against the deletion lists, locally.
  4. 4You review the status file before anything is uploaded.

CalPrivacy DROP

  • Sends hashed deletion lists, never raw identifiers.
  • Receives one status code per request, after your approval.

BrokerShield dashboard (optional)

If you opt in, it receives counts, timestamps and Merkle roots of your evidence log. Never consumer data, hashes or deletion lists.

Where data goes in one DROP cycle. Arrows show the only two transfers: lists down from DROP, status codes up to DROP.

How it works

  1. Step 1

    Pull

    Download the hashed deletion lists from DROP through the official API, or import the file you downloaded from the portal. Each pull is logged with its time and file hash.

  2. Step 2

    Match on your machines

    Your records are standardized and hashed with the published rules, then matched locally. Nothing is uploaded to us.

  3. Step 3

    Approve and report

    You approve the status file before it goes to the state. Every step lands in a tamper-evident, signed log you can hand to an auditor.

Free Registry Gap Check

We compare the public state data broker registries and email you a one-page report:

  • where we found your company, with the snapshot date of each registry;
  • where we didn't, so you can check whether it matters for you;
  • the registration and DROP deadlines coming up.

A person reviews every report before it's sent. General information, not legal advice.

Prefer direct email? Send your domain to brokershield@parserisk.com.

Built so you don't have to trust us with data

Your data never leaves your systems

The agent runs on your machines with read-only access to your data. There's no copy of your consumer data on our side.

Tamper-evident evidence

Each cycle is recorded as a hash-chained, signed log: lists selected, access times, counts, approvals. Edits, deletions or reordering show up when the log is verified.

Surya

Surya

Founder of ParseRisk, building privacy-preserving compliance automation for data brokers. Focused on California Delete Act (DROP) infrastructure and local on-premise verification where consumer records never leave client infrastructure.

Pricing

Founding prices for our first clients. Paid offers start with a 50% deposit.

Questions

Does any of our data leave our systems?

No. Matching runs on your machines. If you opt in to the hosted dashboard, it receives counts, timestamps and Merkle roots only; never consumer data, hashed identifiers or deletion lists.

Is this legal advice?

No. We build tooling and cite public sources. Whether a law applies to your business is a question for your counsel.

Which states do you cover?

Registration tracking for the California, Vermont, Texas and Oregon registries, with Connecticut next: its registration starts January 1, 2027. Deletion cycles run on California's DROP; Connecticut's deletion mechanism plugs into the same agent when it launches.

What will auditors ask for?

Independent DROP audits start January 1, 2028 and repeat every 3 years. The proposed rules list 9 areas, from deletion list selection to service providers. Read the area-by-area checklist.

What happens with Connecticut's deletion mechanism?

Connecticut must launch it by July 1, 2028. Registered brokers then access it at least every 45 days from October 1, 2028. More on Connecticut.

How do payments work?

Paid offers start with a 50% deposit. Founding prices hold for the terms shown above.