CCPA / CPRA — California Consumer Privacy Act

CCPA Compliance for Startups — Done For You.

Selling to or collecting data from Californians? Folksoft maps your personal information, wires up consumer rights and opt-outs, and keeps your privacy program current — so you stay CCPA/CPRA compliant while you grow.

Book a Demo See What We Do

Compliant in weeks — no privacy hires needed.

Ready in weeks PI mapped Opt-outs honoured Continuous

The platform

What Folksoft does for your CCPA readiness

From the moment you connect your stack to the day a consumer files a request, Folksoft runs the program for you.

Personal-information mapping

Agents map what personal information you collect, why you collect it, and who you share it with.

Consumer rights, wired up

Access, deletion, correction, and opt-out of sale or sharing — all handled with real request workflows.

Request Verified Fulfilled

“Do Not Sell or Share” & sensitive-PI limits

Opt-out signals — including Global Privacy Control — and limits on sensitive personal information use, configured for you.

GPC signal honoured

~~No sale after opt-outNo sensitive-PI overreach~~

Policies, written for you

A CCPA-compliant privacy policy and your notices at collection, drafted and kept current as your data flows change — no blank templates.

Continuous monitoring of your stack

Folksoft watches your AWS, Azure, GCP, GitHub, GitLab, and Okta environments for drift and new data flows.

Thresholds vs Service provider

Do you meet the CCPA thresholds?

Most startups are pulled into CCPA one of two ways. The route decides what you have to build — and how fast.

Directly covered

You meet a threshold

For-profit businesses handling Californians' data are covered if they meet any one of the statutory thresholds — not all three.

Any one thresholdDirectly covered

Roughly $25M+ in annual gross revenue

Buying, selling, or sharing PI of 100k+ consumers or households

50%+ of annual revenue from selling or sharing PI

Meet one and the full obligations apply directly to you

Service provider

Pulled in by contract

Even if you don't meet a threshold, your enterprise customers will require CCPA-compliant terms and handling from you as their service provider.

What customers ask forContractual

Service-provider or data-processing terms, signed

Use limited to the business purpose in the contract

Support for your customers' consumer-rights requests

No threshold needed — the deal itself brings the obligation

In short: either you're directly covered by a threshold, or you're pulled in contractually as a service provider — Folksoft determines which and gets you compliant.

Who needs CCPA?

If any of these sound like you, CCPA/CPRA is likely already on your critical path.

SaaS & consumer startups

SaaS and consumer startups collecting personal data from California residents.

Companies over a threshold

Companies meeting a CCPA revenue or data-volume threshold.

Vendors signing CCPA terms

Vendors asked to sign CCPA service-provider or data-processing terms.

Businesses that sell or share PI

Businesses that sell or “share” personal information, including for cross-context behavioural advertising.

FAQ

CCPA questions, answered

Everything founders ask us before starting their CCPA program.

Still have questions?

01 Does CCPA apply to my startup?

If you handle Californians' personal data and meet a threshold (revenue, volume, or data-sale share), yes. Even below thresholds, enterprise customers often require it contractually. Folksoft confirms your exact obligations.

02 What's the difference between CCPA and CPRA?

CPRA is the 2023 amendment that expanded CCPA (added correction rights, sensitive-PI limits, and the CPPA regulator). We treat them together.

03 How much does CCPA compliance cost?

It depends on your data flows and scope. Contact us for a tailored quote.

04 Can I do this without a privacy team?

Yes. Folksoft runs the program and pairs you with a real GRC analyst.