Glossary of Compliance
Compliance Glossary
Our list of curated compliance glossary offers everything you to know about compliance in one place.
Data Retention
The GDPR Data Retention rules says that any personal data collected or processed must be retained solely for the duration necessary to accomplish the purpose for which the information was initially gathered. However, it is important to note that there are exceptions, such as scientific or historical research.
Additional reading
Implementing IT Governance Frameworks: Best Practices for Business Alignment
There are two key contributors that have led to the rise of IT governance and for good. First, there is an increasing acknowledgement on IT concerns as business problems; IT is no longer seen as a siloed function. Second, IT professionals today need to think beyond data, tools, and processes to earn a seat at…
ISO 9001 Document Controls: Clauses & Requirements
A spike in churn reveals that support teams were using inconsistent troubleshooting steps, each relying on their own version of the process. This kind of quality lapse is exactly what ISO 9001 is designed to prevent through standardized, well-controlled processes. Operational controls keep processes running within defined limits, while document controls ensure the supporting procedures…
NIST Cybersecurity Best Practices
The NIST cybersecurity framework holds a reputable name in the world of cybersecurity. It is mandatory for companies within the US federal network but companies from other industries like SaaS and tech can also adopt it should they have clients within the network. Unlike many other frameworks, NIST has a non-typical approach to implementation and…

Sprinto: Your growth superpower
Use Sprinto to centralize security compliance management – so nothing
gets in the way of your moving up and winning big.



