01
Data Processing Agreement (DPA) & Security Controls
PLDUnity enforces company-level data isolation, role-based access control (Administrator, Analyst, Read-only, and External Auditor with mandatory expiration), authenticator-app 2FA, TLS encryption in transit, encryption at rest, audit logs of every file access, encrypted backups, short-lived download links, LFPDPPP privacy notices, data export, and account cancellation requests.
02
Authority Deliveries and 10-Year Retention (Art. 18 IV LFPIORPI)
PLDUnity provides an Art. 41 automated mechanisms map with live figures, monthly threshold-to-notice reconciliation, printable verification packages, authority delivery ZIPs with per-client folders and SHA-256 delivery certificates, and a complete portable 10-year archive ZIP with SHA-256 fingerprint.