1 Compliance Framework
Zaburex operates under a compliance framework designed for clients in the Dominican Republic and the United States. This page documents the laws, regulations, and standards that guide our operation.
2 Dominican Republic
- Law 172-13: Personal Data Protection
- Law 53-07: High-Technology Crimes and Offenses
- Law 126-02: Electronic Commerce, Documents and Digital Signatures
- INDOTEL Regulations: Dominican Institute of Telecommunications
3 United States
- COPPA — Children's Online Privacy Protection Act
- CCPA/CPRA — California Consumer Privacy Act/Rights Act
- FERPA — Family Educational Rights and Privacy Act
- CIPA — Children's Internet Protection Act
- FTC Act Section 5 — Fair commercial practices
- CFAA — Computer Fraud and Abuse Act
- ECPA — Electronic Communications Privacy Act
- E-SIGN Act — Electronic signatures validity
4 Security Standards
- TLS 1.2+: Encryption across all service communications
- DNSSEC Validation: DNS integrity validation
- DoH/DoT: Encrypted DNS available to clients
- Network Separation: Tenant isolation
5 Privacy by Design
Zaburex applies Privacy by Design principles: minimal data collection, encryption in transit and at rest, role-based access control, and limited technical log retention.
6 Educational Institution Agreements
For U.S. educational institutions subject to FERPA and CIPA, Zaburex may act as "school official" for the limited purpose of DNS filtering. Institutions are responsible for obtaining parental consents under COPPA for users under 13.
7 Government Data Requests
Zaburex will respond to valid legal requests from competent authorities per applicable laws of RD and the U.S. To the extent legally permitted, we will notify the affected client before disclosing data.
8 Compliance Contact
For compliance inquiries, certifications, or legal requests: [email protected]