Last Updated: March 06, 2025
Our Compliance Commitment
At Mailisto.AI, we are committed to maintaining the highest standards of legal and regulatory compliance. We understand that compliance is essential not only to meet our legal obligations but also to build trust with our customers and partners.
Email and Anti-Spam Compliance
As an email automation service, we adhere to global anti-spam regulations, including:
- CAN-SPAM Act (USA): We ensure compliance with all requirements, including honoring opt-out requests promptly, avoiding deceptive subject lines, and including valid physical postal addresses in emails.
- CASL (Canada): We comply with Canada's Anti-Spam Legislation by obtaining proper consent, providing identification information, and offering unsubscribe mechanisms.
- PECR (UK): We follow the Privacy and Electronic Communications Regulations by ensuring proper consent for marketing communications to individuals and businesses.
Our platform is designed to help you maintain compliance with these regulations by providing:
- Easy-to-implement unsubscribe mechanisms
- Tools to maintain and update consent records
- Templates with required legal information
- Automated suppression of opt-out requests
Data Protection Compliance
Mailisto.AI complies with major data protection regulations, including:
- GDPR (European Union): We are fully compliant with the General Data Protection Regulation. For more details, please visit our GDPR Compliance page.
- CCPA (California, USA): We comply with the California Consumer Privacy Act by providing transparency about data collection, honoring data access and deletion requests, and offering opt-out options.
- LGPD (Brazil): We adhere to Brazil's Lei Geral de Proteção de Dados by implementing the required data protection measures and respecting data subject rights.
AI Ethics and Compliance
As an AI-powered platform, we are committed to ethical AI use:
- Transparency: We provide clear information about how AI is used in our service.
- Human oversight: Our AI systems are designed with human oversight and intervention capabilities.
- Non-discrimination: We implement measures to prevent AI systems from producing discriminatory outcomes.
- Accountability: We take responsibility for the outputs of our AI systems and provide mechanisms for feedback and improvement.
Security Standards
We implement industry-standard security measures to protect your data:
- Encryption: All data is encrypted in transit and at rest using strong encryption protocols.
- Access controls: We implement strict access controls and authentication mechanisms.
- Regular security assessments: We conduct regular security assessments and vulnerability testing.
- Incident response plan: We maintain a comprehensive incident response plan to address security breaches promptly.
Third-Party Service Provider Compliance
We ensure that our third-party service providers, including Google services and OpenAI, maintain appropriate security and compliance standards. We have data processing agreements in place with all service providers who process personal data on our behalf.
Compliance Documentation
We maintain comprehensive documentation of our compliance efforts, including:
- Records of processing activities
- Data protection impact assessments
- Security policies and procedures
- Employee training records
- Third-party vendor assessments
Continuous Compliance
We are committed to maintaining an ongoing compliance program, including:
- Regular compliance reviews and audits
- Monitoring regulatory changes
- Updating policies and procedures as needed
- Ongoing employee training
Contact Our Compliance Team
If you have any questions about our compliance efforts or would like to report a compliance concern, please contact our compliance team:
Email: compliance@mailisto.ai