🛡 Built for the California Delete Act (SB 362)

Your DROP deletion requests, handled — every 45 days, without the spreadsheet chaos.

dropsolace pulls California's DROP deletion lists, matches them against your consumer data with verifiable hashing, and walks your team through every step until the status report is filed.

Apply for access See how it works
Passes all 18 official CPPA test vectors No PII stored — SHA-256 hashes only API & manual modes
The reality since August 1, 2026

DROP is mandatory. The clock is unforgiving.

Every registered data broker must access California's Deletion Request Outreach Platform (DROP), process consumer deletion requests, and report status — on a repeating 45-day cycle.

$200/day
Per unhandled deletion request
Civil penalties accrue daily for each request you fail to process and report on time.
45 days
From receipt to reported
Download → match → process → report. Miss the window and you're out of compliance — then the next cycle starts.
6 list types
NDZ · Email · Phone · MAID · NameVIN · CTVID
Each list uses SHA-256 hashed identifiers. Matching them yourself means building a hashing pipeline to CPPA specs.
How it works

Four steps. We mirror the official process exactly.

dropsolace follows the CPPA's own workflow — the same steps, the same terms, the same file formats. Nothing to relearn.

1

Download deletion lists

Pull every list you're subscribed to with one click via API Connect — or upload the ZIP you downloaded from DROP.

Official step: "Download consumer deletion lists"
2

Match against your data

Upload a CSV of your consumer records. We standardize and hash them to CPPA specs, then match every request — verifiable, byte for byte.

Official step: "Standardize and hash their own consumer records"
3

Process each request

Decide person by person: deleted, exempted, or opted out. Changes to your data later? We flag amendments automatically.

Official step: "Match and process requests"
4

Report status to DROP

We generate the official Id,Status CSV with the correct filename — send it to DROP in one click, or download and upload it yourself.

Official step: "Report the status of each request in DROP"
Inside the product

One inbox. Your whole compliance cycle.

Every cycle lives on a single screen: the countdown, the four steps, the people waiting for a decision. No menus to hunt through, no state to keep in your head.

app.dropsolace.com/index
Compliance Inbox — 45-day cycle countdown, four-step workflow, live status cards

The Compliance Inbox: cycle countdown, four guided steps, and every pending decision in one place.

app.dropsolace.com/upload
Consumer Data upload with column mapping and privacy notice

Upload consumer data as a plain CSV. Columns are auto-detected; nothing leaves your workspace but hashes.

app.dropsolace.com/connection
DROP Settings — API Connect or Manual Upload mode

Two integration modes: API Connect for one-click pulls, or Manual Upload if you prefer working directly in the CPPA portal.

Why brokers choose us

Compliance help that assumes you're a broker, not a developer.

📄

Zero integration

No API project, no engineers. Export your data to CSV from Excel or your CRM, map the columns once, done. If you can attach a file to an email, you can use dropsolace.

🔬

100% verifiable hashing

Our hash engine passes all 18 official CPPA test vectors — including transliteration, ZIP edge cases, and composite hashes. Every match can be independently verified.

🚦

Compliance gates built in

The rules from the Delete Act regulations are enforced for you: we block reporting mistakes before they happen and stop new downloads until the previous session is fully reported (§7614(a)).

⏱️

45-day cycle tracking

A live countdown on every cycle, with warning states as the deadline approaches. Amendments get their own alerts so nothing slips past 45 days.

🚫

Suppression list management

Deletion is an ongoing duty: every matched consumer is suppressed from future sales automatically, with a full event history and removed-consumer handling.

🧾

Audit-ready by default

Every download, match, decision, and report is written to an append-only audit log. When a regulator asks how you handled a request, the answer is one export away.

Data minimization

We never store your customer data. That's the point.

dropsolace was designed around the CPPA's own PII-minimization principle: we hold only the irreversible hashes needed to match, and nothing more.

Hashes in, hashes out

Deletion lists arrive pre-hashed. Your uploads are hashed in your workspace the moment they're processed — original rows are never persisted.

Nothing sent to CPPA on your behalf

We only submit the status reports you approve. Your consumer records never leave the workspace in readable form.

Keys encrypted at rest

API keys are stored encrypted and shown masked after saving. Each workspace's data is isolated at the database level.

Get started

Start your first cycle before the next deadline starts it for you.

Tell us who you are and your CPPA registration number — we'll set up your workspace and walk you through the first download together.

Apply for access

Setup call optional · No credit card

FAQ

Questions brokers ask us

Is my customer data safe?

Yes. We never store your original data. Everything is hashed and used only to match against DROP deletion requests — Only irreversible hashes are kept, consistent with the CPPA DROP platform's PII-minimization principle.

I'm not technical. Can I really do this?

Yes — that's who dropsolace is built for. The Manual Upload mode needs no API key: download the ZIP from the CPPA portal, upload it here, follow four guided steps. Column names in your CSV are detected automatically.

Do you submit anything to CPPA without my approval?

Never. In API Connect mode, "Report to DROP" is always a button you press. In Manual mode, you download the official CSV and upload it yourself. Either way, nothing is filed without your explicit action.

We already missed a cycle. Is it too late?

No — but start now. The 45-day duty restarts with your next access. dropsolace tracks the clock from your first download and keeps every subsequent cycle on schedule, including amendments for anything you previously reported as "Not Found."

How does pricing work?

Pricing is set for small brokers — a fraction of your annual CPPA registration fee, with no per-request charges. Apply and we'll quote based on your list size.