https://upcode.com/assets/ComplianceHub-CJFNvlrP.js

1import{j as e}from"./vendor-ui-CNxyfBKX.js";import{f as P,L as o}from"./vendor-react-CyCAQrU1.js";import{b as C,N as v,B as r,F as b,ap as S,A as k,L as q,e as D}from"./index-3hASqYY4.js";import{C as l,a as c,b as u,c as h}from"./card-OEjrJOgG.js";import{m as n}from"./vendor-animation-MSaj4l-p.js";import{D as H}from"./dollar-sign-CoCCOSM7.js";import{T as g}from"./triangle-alert-uPNA1zz4.js";import{L as x}from"./lock-Dkd9i-UE.js";import{S as d}from"./shield-AvyBCTuO.js";import{S as y}from"./server-DVioXNZa.js";import{U as m}from"./users-_xCTUJaz.js";import{C as R}from"./credit-card-CY1VY8Pd.js";import{D as j}from"./database-ip97REa7.js";import{B as w}from"./building-2-HkEhMnk9.js";import{G as N}from"./globe-rp2a7vzQ.js";import"./vendor-3d-DEv8pFk_.js";import"./vendor-charts-pU0kIp3O.js";import"./vendor-query-TL9NOarz.js";import"./vendor-supabase-ClCNGvGL.js";/**
2 * @license lucide-react v0.462.0 - ISC
3 *
4 * This source code is licensed under the ISC license.
5 * See the LICENSE file in the root directory of this source tree.
6 */const p=C("FileCheck",[["path",{d:"M15 2H6a2 2 0 0 0-2 2v16a2 2 0 0 0 2 2h12a2 2 0 0 0 2-2V7Z",key:"1rqfz7"}],["path",{d:"M14 2v4a2 2 0 0 0 2 2h4",key:"tnqrlb"}],["path",{d:"m9 15 2 2 4-4",key:"1grp1n"}]]);/**
7 * @license lucide-react v0.462.0 - ISC
8 *
9 * This source code is licensed under the ISC license.
10 * See the LICENSE file in the root directory of this source tree.
11 */const T=C("Stethoscope",[["path",{d:"M11 2v2",key:"1539x4"}],["path",{d:"M5 2v2",key:"1yf1q8"}],["path",{d:"M5 3H4a2 2 0 0 0-2 2v4a6 6 0 0 0 12 0V5a2 2 0 0 0-2-2h-1",key:"rb5t3r"}],["path",{d:"M8 15a6 6 0 0 0 12 0v-3",key:"x18d4x"}],["circle",{cx:"20",cy:"10",r:"2",key:"ts1r5v"}]]),f={hipaa:{title:"HIPAA Compliance",fullName:"Health Insurance Portability and Accountability Act",description:"Build healthcare applications that protect patient data and meet all federal requirements for handling Protected Health Information (PHI).",icon:T,industry:"Healthcare",penalty:"Up to $1.5M per violation category per year",timeline:"3-6 months typical implementation",costRange:"$50,000 - $250,000+",keyRequirements:[{title:"Access Controls",description:"Role-based access with unique user IDs, automatic logoff, and encryption mechanisms",icon:x},{title:"Audit Controls",description:"Hardware, software, and procedural mechanisms to record and examine access to PHI",icon:p},{title:"Integrity Controls",description:"Policies and procedures to protect PHI from improper alteration or destruction",icon:d},{title:"Transmission Security",description:"Technical security measures to guard against unauthorized access during electronic transmission",icon:y},{title:"Business Associate Agreements",description:"Contracts with third-party vendors who handle PHI on your behalf",icon:m},{title:"Breach Notification",description:"Procedures for notifying affected 

11individuals and HHS of data breaches",icon:g}],services:[{title:"HIPAA-Compliant App Development",description:"Custom healthcare applications built from the ground up with compliance in mind"},{title:"Security Risk Assessment",description:"Comprehensive evaluation of your current systems against HIPAA requirements"},{title:"Cloud Infrastructure Setup",description:"HIPAA-compliant hosting on AWS, Azure, or Google Cloud with proper BAAs"},{title:"EHR/EMR Integration",description:"Secure integration with electronic health record systems"},{title:"Telehealth Platforms",description:"HIPAA-compliant video conferencing and patient communication tools"},{title:"Compliance Documentation",description:"Policies, procedures, and training materials for your organization"}],faqs:[{question:"Do I need HIPAA compliance for my healthcare app?",answer:"If your app collects, stores, or transmits Protected Health Information (PHI), you must comply with HIPAA. This includes patient names, addresses, medical records, and billing information."},{question:"What's the difference between HIPAA and HITECH?",answer:"HITECH (2009) extended HIPAA requirements to business associates and increased penalties for violations. Both must be followed for full compliance."},{question:"Can I use standard cloud hosting for a HIPAA app?",answer:"No. You need cloud providers that offer HIPAA-compliant services and will sign a Business Associate Agreement (BAA). AWS, Azure, and Google Cloud offer these options."},{question:"How long does HIPAA compliance take?",answer:"For a new application, expect 3-6 months for initial compliance. Ongoing compliance requires continuous monitoring and annual risk assessments."}],stats:[{label:"Average breach cost",value:"$10.9M"},{label:"Breaches in 2024",value:"725+"},{label:"Records exposed",value:"133M+"},{label:"Enforcement actions",value:"2,700+"}]},"pci-dss":{title:"PCI-DSS Compliance",fullName:"Payment Card Industry Data Security Standard",description:"Process credit card payments securely with applications that meet all 12 PCI-DSS requirements for protecting cardholder data.",icon:R,industry:"E-commerce & Finance",penalty:"Fines from $5,000 to $100,000 per month",timeline:"2-4 months typical implementation",costRange:"$20,000 - $150,000+",keyRequirements:[{title:"Secure Network",description:"Install and maintain a firewall configuration and don't use vendor-supplied defaults",icon:y},{title:"Protect Cardholder Data",description:"Protect stored cardholder data and encrypt transmission across open networks",icon:x},{title:"Vulnerability Management",description:"Use and regularly update anti-virus software and develop secure systems",icon:d},{title:"Access Control",description:"Restrict access to cardholder data on a need-to-know basis with unique IDs",icon:m},{title:"Network Monitoring",description:"Track and monitor all access to network resources and cardholder data",icon:p},{title:"Security Policy",description:"Maintain a policy that addresses information security for all personnel",icon:j}],services:[{title:"PCI-Compliant E-commerce Development",description:"Online stores with secure payment processing from day one"},{title:"Payment Gateway Integration",description:"Stripe, Square, Braintree, and other PCI-compliant payment integrations"},{title:"Tokenization Implementation",description:"Replace sensitive card data with secure tokens to reduce PCI scope"},{title:"Self-Assessment Questionnaire (SAQ)",description:"Help completing the appropriate SAQ for your merchant level"},{title:"Penetration Testing",description:"Required quarterly vulnerability scans and annual penetration tests"},{title:"Security Architecture Review",description:"Evaluate and improve your payment data flow and storage practices"}],faqs:[{question:"What PCI compliance level do I need?",answer:"Level depends on transaction volume: Level 1 (6M+), Level 2 (1-6M), Level 3 (20K-1M e-commerce), Level 4 (under 20K e-commerce or 1M other). Most small businesses are Level 4."},{question:"Can I avoid PCI compliance by using Stripe?",answer:"Using Stripe significantly reduces your PCI scope (SAQ A), but you're never completely exempt. You still must complete annual self-assessments and maintain basic security controls."},{question:"What happens if I'm not PCI compliant?",answer:"Non-compliance can result in monthly fines ($5,000-$100,000), increased transaction fees, liability for fraud losses, and potential loss of ability to process cards."},{question:"Do I need PCI compliance for subscription billing?",answer:"Yes. Any recurring billing that stores or processes card data requires PCI compliance, though tokenization can minimize your requirements."}],stats:[{label:"Card fraud losses (2024)",value:"$32B"},{label:"E-commerce fraud rate",value:"2.9%"},{label:"Average breach cost",value:"$4.4M"},{label:"Compliance requirements",value:"300+"}]},soc2:{title:"SOC 2 Compliance",fullName:"System and Organization Controls 2",description:"Demonstrate your commitment to security with SOC 2 Type I or Type II certification for your Sa

11aS or service organization.",icon:w,industry:"SaaS & Technology",penalty:"Lost enterprise contracts (avg. $500K+ deals)",timeline:"4-12 months for Type II",costRange:"$50,000 - $500,000+",keyRequirements:[{title:"Security",description:"Protection against unauthorized access through firewalls, intrusion detection, and multi-factor authentication",icon:x},{title:"Availability",description:"System accessibility as stipulated by SLAs, including disaster recovery and incident handling",icon:y},{title:"Processing Integrity",description:"System processing is complete, valid, accurate, timely, and authorized",icon:p},{title:"Confidentiality",description:"Information designated as confidential is protected through encryption and access controls",icon:d},{title:"Privacy",description:"Personal information is collected, used, retained, and disclosed in conformity with privacy notice",icon:m},{title:"Common Criteria",description:"Organization-level controls covering governance, risk management, and vendor management",icon:j}],services:[{title:"SOC 2 Readiness Assessment",description:"Gap analysis comparing your current controls against SOC 2 requirements"},{title:"Policy & Procedure Development",description:"Create the 50+ policies required for SOC 2 compliance"},{title:"Technical Control Implementation",description:"Deploy monitoring, logging, encryption, and access control systems"},{title:"Evidence Collection Automation",description:"Set up tools like Vanta, Drata, or Secureframe for continuous compliance"},{title:"Audit Preparation",description:"Prepare documentation and coordinate with your chosen auditor"},{title:"Continuous Monitoring",description:"Ongoing compliance maintenance and annual audit support"}],faqs:[{question:"What's the difference between SOC 2 Type I and Type II?",answer:"Type I evaluates your controls at a single point in time. Type II evaluates controls over a period (usually 6-12 months) to prove they operate effectively. Enterprise customers typically require Type II."},{question:"Do I need all five Trust Service Criteria?",answer:"Security is mandatory. The other four (Availability, Processing Integrity, Confidentiality, Privacy) are optional based on your services. Most companies include Security and Availability at minimum."},{question:"How long does SOC 2 certification take?",answer:"Type I: 2-4 months. Type II: 6-12 months (includes the observation period). Automation tools can significantly accelerate readiness."},{question:"Is SOC 2 legally required?",answer:"No, but it's effectively required to sell to enterprise customers. 84% of enterprises require SOC 2 from their vendors before signing contracts."}],stats:[{label:"Enterprises requiring SOC 2",value:"84%"},{label:"Average deal size unlocked",value:"$500K+"},{label:"Controls to implement",value:"100+"},{label:"Policies required",value:"50+"}]},gdpr:{title:"GDPR Compliance",fullName:"General Data Protection Regulation",description:"Build applications that respect EU citizen privacy rights with proper consent management, data portability, and the right to erasure.",icon:N,industry:"Any serving EU customers",penalty:"Up to €20M or 4% of global revenue",timeline:"2-6 months typical implementation",costRange:"$30,000 - $200,000+",keyRequirements:[{title:"Lawful Basis for Processing",description:"Document legal grounds for all data processing: consent, contract, legal obligation, vital interests, public task, or legitimate interests",icon:p},{title:"Data Subject Rights",description:"Enable right to access, rectification, erasure, portability, restriction, and objection",icon:m},{title:"Privacy by Design",description:"Build data protection into systems from the start, not as an afterthought",icon:d},{title:"Data Protection Officer",description:"Appoint a DPO if you process large-scale personal data or sensitive categories",icon:w},{title:"Breach Notification",description:"Report qualifying breaches to supervisory authority within 72 hours",icon:g},{title:"Cross-Border Transfers",description:"Ensure adequate protection when transferring data outside the EU/EEA",icon:N}],services:[{title:"GDPR-Compliant Web Development",description:"Websites and apps with proper consent management from launch"},{title:"Cookie Consent Implementation",description:"Compliant cookie banners that actually block tracking before consent"},{title:"Privacy Policy & Notices",description:"Clear, compliant privacy documentation for your users"},{title:"Data Subject Request Handling",description:"Systems to efficie

11ntly handle access, deletion, and portability requests"},{title:"Data Mapping & Inventory",description:"Document all personal data flows through your organization"},{title:"Vendor Assessment",description:"Evaluate third-party data processors for GDPR compliance"}],faqs:[{question:"Does GDPR apply to my US-based company?",answer:"Yes, if you offer goods/services to EU residents or monitor their behavior (like website analytics). Physical location doesn't matter—it's about whose data you process."},{question:"What counts as personal data under GDPR?",answer:"Any information relating to an identifiable person: name, email, IP address, location data, cookie identifiers, and even pseudonymized data if it can be linked back."},{question:"Do I need explicit consent for everything?",answer:"No. Consent is just one lawful basis. Contracts, legitimate interests, and legal obligations are often more appropriate. Over-relying on consent can actually cause compliance issues."},{question:"How do I handle data deletion requests?",answer:"You must respond within 30 days. This requires knowing where all personal data is stored and having technical capability to delete it across all systems, including backups."}],stats:[{label:"Total fines issued",value:"€4.5B+"},{label:"Largest single fine",value:"€1.2B"},{label:"Consumer awareness",value:"67%"},{label:"Companies fined",value:"2,000+"}]}},ee=()=>{const{standard:a}=P(),t=f[(a==null?void 0:a.toLowerCase())||""];if(!t)return e.jsxs("div",{className:"min-h-screen bg-background",children:[e.jsx(v,{}),e.jsxs("div",{className:"container mx-auto px-4 py-24 text-center",children:[e.jsx("h1",{className:"text-4xl font-bold mb-4",children:"Compliance Standard Not Found"}),e.jsx("p",{className:"text-muted-foreground mb-8",children:"Choose from our supported compliance frameworks:"}),e.jsx("div",{className:"flex flex-wrap justify-center gap-4",children:Object.entries(f).map(([i,s])=>e.jsx(o,{to:`/compliance/${i}`,children:e.jsx(r,{variant:"outline",size:"lg",children:s.title})},i))})]}),e.jsx(b,{})]});const I=t.icon;return e.jsxs(e.Fragment,{children:[e.jsxs(S,{children:[e.jsxs("title",{children:[t.title," Development Services | Upcode"]}),e.jsx("meta",{name:"description",content:t.description}),e.jsx("meta",{name:"keywords",content:`${t.title}, ${a} compliant development, ${a} software, ${t.industry} compliance`}),e.jsx("link",{rel:"canonical",href:`https://upcode.com/compliance/${a}`}),e.jsx("script",{type:"application/ld+json",children:JSON.stringify({"@context":"https://schema.org","@type":"Service",name:`${t.title} Development Services`,description:t.description,provider:{"@type":"Organization",name:"Upcode"},serviceType:"Compliance Software Development"})})]}),e.jsxs("div",{className:"min-h-screen bg-background",children:[e.jsx(v,{}),e.jsxs("section",{className:"relative pt-32 pb-20 overflow-hidden",children:[e.jsx("div",{className:"absolute inset-0 bg-gradient-to-br from-primary/10 via-background to-background"}),e.jsx("div",{className:"container mx-auto px-4 relative z-10",children:e.jsxs(n.div,{initial:{opacity:0,y:20},animate:{opacity:1,y:0},transition:{duration:.6},className:"max-w-4xl mx-auto text-center",children:[e.jsxs("div",{className:"inline-flex items-center gap-2 bg-primary/10 border border-primary/20 rounded-full px-4 py-2 mb-6",children:[e.jsx(I,{className:"h-5 w-5 text-primary"}),e.jsxs("span",{className:"text-sm font-medium",children:[t.industry," Compliance"]})]}),e.jsxs("h1",{className:"text-4xl md:text-6xl font-bold mb-6",children:[t.title,e.jsx("span",{className:"block text-2xl md:text-3xl font-normal text-muted-foreground mt-2",children:"Development Services"})]}),e.jsx("p",{className:"text-lg md:text-xl text-muted-foreground mb-8 max-w-3xl mx-auto",children:t.description}),e.jsxs("div",{className:"flex flex-col sm:flex-row gap-4 justify-center mb-12",children:[e.jsx(o,{to:"/contact",children:e.jsxs(r,{size:"lg",className:"gap-2",children:["Get Compliance Consultation",e.jsx(k,{className:"h-4 w-4"})]})}),e.jsx(o,{to:"/cost-calculator",children:e.jsxs(r,{size:"lg",variant:"outline",className:"gap-2",children:[e.jsx(H,{className:"h-4 w-4"}),"Estimate Project Cost"]})})]}),e.jsx("div",{className:"grid grid-cols-2 md:grid-cols-4 gap-4",children:t.stats.map((i,s)=>e.jsx(l,{className:"bg-card/50 backdrop-blur border-border/50",children:e.jsxs(c,{className:"p-4 text-center",children:[e.jsx("div",{className:"text-2xl md:text-3xl font-bold text-primary",children:i.value}),e.jsx("div",{className:"text-sm text-muted-foreground",children:i.label})]})},s))})]})})]}),e.jsx("section",{className:"py-8 bg-destructive/10 border-y border-destructive/20",children:e.jsx("div",{className:"container mx-auto px-4",children:e.jsxs("div",{className:"flex flex-col md:flex-row items-center justify-center gap-4 text-center md:text-left",children:[e.jsx(g,{className:"h-8 w-8 text-destructive flex-shrink-0"}),e.jsxs("div",{children:[e.jsx("span",{className:"font-semibold",children:"Non-Compliance Penalty: "}),e.jsx("span",{className:"text-muted-foreground",children:t.penalty})]}),e.jsx("div",{className:"hidden md:block text-border",children:"|"}),e.jsxs("div",{children:[e.jsx("span",{className:"font-semibold",children:"Timeline: "}),e.jsx("span",{className:"text-muted-foreground",children:t.timeline})]}),e.jsx("div",{className:"hidden md:block text-border",children:"|"}),e.jsxs("div",{children:[e.jsx("span",{className:"font-semibold",children:"Investment: "}),e.jsx("span",{className:"text-muted-foreground",children:t.costRange})]})]})})}),e.jsx("section",{className:"py-20",children:e.jsxs("div",{className:"container mx-auto px-4",children:[e.jsxs(n.div,{initial:{opacity:0,y:20},whileInView:{opacity:1,y:0},transition:{duration:.6},viewport:{once:!0},className:"text-center mb-12",children:[e.jsxs("h2",{className:"text-3xl md:text-4xl font-bold mb-4",children:["Key ",t.title," Requirements"]}),e.jsx("p",{className:"text-muted-foreground max-w-2xl mx-auto",children:"Understanding the core requirements is the first step toward compliance. Here's what your application needs to address."})]}),e.jsx("div",{className:"grid md:grid-cols-2 lg:grid-cols-3 gap-6",children:t.keyRequirements.map((i,s)=>{const A=i.icon;return e.jsx(n.div,{initial:{opacity:0,y:20},whileInView:{opacity:1,y:0},transition:{duration:.4,delay:s*.1},viewport:{once:!0},children:e.jsxs(l,{className:"h-full bg-card/50 backdrop-blur border-border/50 hover:border-primary/50 transition-colors",children:[e.jsx(u,{children:e.jsxs("div",{className:"flex items-center gap-3",children:[e.jsx("div",{className:"p-2 rounded-lg bg-primary/10",children:e.jsx(A,{className:"h-5 w-5 text-primary"})}),e.jsx(h,{className:"text-lg",children:i.title})]})}),e.jsx(c,{children:e.jsx("p",{className:"text-muted-foreground text-sm",children:i.description})})]})},s)})})]})}),e.jsx("section",{className:"py-20 bg-muted/30",children:e.jsxs("div",{className:"container mx-auto px-4",children:[e.jsxs(n.div,{initial:{opacity:0,y:20},whileInView:{opacity:1,y:0},transition:{duration:.6},viewport:{once:!0},className:"text-center mb-12",children:[e.jsxs("h2",{className:"text-3xl md:text-4xl font-bold mb-4",children:["Our ",t.title," Services"]}),e.jsx("p",{className:"text-muted-foreground max-w-2xl mx-auto",children:"End-to-end compliance development services tailored to your needs."})]}),e.jsx("div",{className:"grid md:grid-cols-2 lg:grid-cols-3 gap-6",children:t.services.map((i,s)=>e.jsx(n.div,{initial:{opacity:0,y:20},whileInView:{opacity:1,y:0},transition:{duration:.4,delay:s*.1},viewport:{once:!0},children:e.jsxs(l,{className:"h-full bg-card border-border/50 hover:shadow-lg transition-shadow",children:[e.jsx(u,{children:e.jsxs("div",{className:"flex items-start gap-3",children:[e.jsx(q,{className:"h-5 w-5 text-green-500 mt-1 flex-shrink-0"}),e.jsx(h,{className:"text-lg",children:i.title})]})}),e.jsx(c,{children:e.jsx("p",{className:"text-muted-foreground text-sm",children:i.description})})]})},s))})]})}),e.jsx("section",{className:"py-20",children:e.jsxs("div",{className:"container mx-auto px-4",children:[e.jsxs(n.div,{initial:{opacity:0,y:20},whileInView:{opacity:1,y:0},transition:{duration:.6},viewport:{once:!0},className:"text-center mb-12",children:[e.jsx("h2",{className:"text-3xl md:text-4xl font-bold mb-4",children:"Frequently Asked Questions"}),e.jsxs("p",{className:"text-muted-foreground max-w-2xl mx-auto",children:["Common questions about ",t.title," for software development."]})]}

11),e.jsx("div",{className:"max-w-3xl mx-auto space-y-6",children:t.faqs.map((i,s)=>e.jsx(n.div,{initial:{opacity:0,y:20},whileInView:{opacity:1,y:0},transition:{duration:.4,delay:s*.1},viewport:{once:!0},children:e.jsxs(l,{className:"bg-card/50 backdrop-blur",children:[e.jsx(u,{children:e.jsxs(h,{className:"text-lg flex items-start gap-3",children:[e.jsx("span",{className:"text-primary font-bold",children:"Q:"}),i.question]})}),e.jsx(c,{children:e.jsx("p",{className:"text-muted-foreground pl-6",children:i.answer})})]})},s))}),e.jsx("script",{type:"application/ld+json",children:JSON.stringify({"@context":"https://schema.org","@type":"FAQPage",mainEntity:t.faqs.map(i=>({"@type":"Question",name:i.question,acceptedAnswer:{"@type":"Answer",text:i.answer}}))})})]})}),e.jsx("section",{className:"py-20 bg-primary/5",children:e.jsx("div",{className:"container mx-auto px-4 text-center",children:e.jsxs(n.div,{initial:{opacity:0,y:20},whileInView:{opacity:1,y:0},transition:{duration:.6},viewport:{once:!0},children:[e.jsxs("h2",{className:"text-3xl md:text-4xl font-bold mb-4",children:["Ready to Build ",t.title.split(" ")[0],"-Compliant Software?"]}),e.jsxs("p",{className:"text-muted-foreground max-w-2xl mx-auto mb-8",children:["Our team has helped dozens of companies achieve and maintain ",t.title,". Let's discuss your project requirements."]}),e.jsxs("div",{className:"flex flex-col sm:flex-row gap-4 justify-center",children:[e.jsx(o,{to:"/claim-your-free-session",children:e.jsxs(r,{size:"lg",className:"gap-2",children:[e.jsx(D,{className:"h-4 w-4"}),"Schedule Free Consultation"]})}),e.jsx(o,{to:"/case-studies",children:e.jsx(r,{size:"lg",variant:"outline",children:"View Case Studies"})})]})]})})}),e.jsx("section",{className:"py-12 border-t border-border/50",children:e.jsxs("div",{className:"container mx-auto px-4",children:[e.jsx("h3",{className:"text-lg font-semibold mb-6 text-center",children:"Other Compliance Frameworks"}),e.jsx("div",{className:"flex flex-wrap justify-center gap-4",children:Object.entries(f).filter(([i])=>i!==(a==null?void 0:a.toLowerCase())).map(([i,s])=>e.jsx(o,{to:`/compliance/${i}`,children:e.jsxs(r,{variant:"ghost",className:"gap-2",children:[e.jsx(s.icon,{className:"h-4 w-4"}),s.title]})},i))})]})}),e.jsx(b,{})]})]})};export{ee as default};