From a022d4b0b8e7f159c64172bc7917b56ee50b070a Mon Sep 17 00:00:00 2001 From: "Ketan (CometChat)" Date: Thu, 3 Sep 2026 22:42:02 +0530 Subject: [PATCH] docs(fundamentals): link the GDPR entry to the relevant REST APIs Expands the GDPR bullet in the Compliances section so it points to the specific endpoints customers use when servicing data subject requests: retrieving a user's data, and permanently deleting a user along with their messages and conversations. The delete link is deep-linked to the permanent body parameter. Also aligns the feature-table entry with the compliance standards listed alongside it, updates the section intro to cover privacy standards as well as security standards, and fixes a HIPAA typo. --- fundamentals/overview.mdx | 8 ++++---- 1 file changed, 4 insertions(+), 4 deletions(-) diff --git a/fundamentals/overview.mdx b/fundamentals/overview.mdx index 4e4be0416..88c5d52c0 100644 --- a/fundamentals/overview.mdx +++ b/fundamentals/overview.mdx @@ -54,11 +54,11 @@ Fully customizable and easy to use? Yes, it's possible, with our SDKs and APIs f Choosing CometChat is your assurance of a meticulously vetted and highly secure solution. We deeply appreciate and obsess over the significance of both security and compliance. -CometChat is fully compliant with the following security standards: +CometChat is fully compliant with the following security and privacy standards: * **HIPAA + BAA**: CometChat is compliant with HIPAA rules and standards and can enter into a BAA. * **PIPEDA**: CometChat is compliant with PIPEDA and follows the Fair Information Principles. -* **GDPR**: CometChat meets all requirements of GDPR and provides special APIs to enable customers to maintain compliance. +* **GDPR**: CometChat meets all the requirements of GDPR. To service data subject requests, our REST APIs let you [retrieve a user's data](/rest-api/users/get) on request, and separately [permanently delete a user](/rest-api/users/delete#body-permanent) along with all their messages and conversations. * **ISO 27001**: CometChat is certified compliant with the ISO 27001 standards. * **SOC 2 Type 2**: CometChat is certified compliant with SOC 2’s five Trust Service Principles of security, availability, privacy, confidentiality, and processing integrity. @@ -97,8 +97,8 @@ CometChat is fully compliant with the following security standards: | Kick/ban users | Data export | App creation API | | Report message | ISO 27001 | Presence webhook | | Virus & malware scanner | SOC 2 | Read receipt | -| Sentiment analysis | GDPR API | Delivery receipt | -| | HIPPA w/ BAA | | +| Sentiment analysis | GDPR | Delivery receipt | +| | HIPAA w/ BAA | | | | Encryption in transit (TLS/SSL) | | | | Encryption at rest (AES 256) | | | | Role-based access control | |