Meridian Compliance Report

cal.com

Generated 23 July 2026, 05:09 UTC
Report 5a8324e404748bff18399c53
22 of 173 applicable controls automatically verified Deterministic, evidence-backed scan result
Meridian provides automated compliance assessments and recommendations, not legal advice. Final compliance determinations should be reviewed by qualified legal, compliance, or security professionals where required.
Meridian Compliance Report

cal.com

Generated 23 July 2026, 05:09 UTC
Report 5a8324e404748bff18399c53
Meridian provides automated compliance assessments and recommendations, not legal advice. Final compliance determinations should be reviewed by qualified legal, compliance, or security professionals where required.

Executive Summary

Applicable Controls
173
Controls determined to apply to this repository
Implemented
22
Requires Documentation
80
Requires Operational Evidence
5
Code Improvement Recommended
66

Repository Overview

In ProductionTrue

Technology Stack

5062 files · 549654 lines

Languagesjavascript, tsx, typescript
FrameworksExpress, NestJS, Next.js, React
CI/CD & IaCDocker, Docker Compose, GitHub Actions

Business Signals

Stores personal dataTrue
Uses AIFalse
Primary jurisdictionUnited States
Processes paymentsFalse
Regulated financial entityFalse
Offers goods/services to the EUTrue
Monitors individuals in the EUFalse
Offers goods/services to IndiaFalse

What Meridian Understood

This repository is a web-based application using a JavaScript stack with both frontend and backend components. It incorporates user authentication, data encryption, and interfaces extensively with external APIs and manages third-party data transfers. Persistent data storage is indicated by comprehensive database access patterns.

Architecture: Full-stack web application

Compliance Scope

Applicable Regulations

GDPRPrivacy & Data ProtectionStatutory law
Your application stores or processes personal data of individuals in the European Union.
Required: matched on stores_personal_data, offers_goods_services_to_eu.
In force since May 2018; applies extraterritorially to organizations offering goods or services to, or monitoring, individuals in the EU.
SOC 2 Trust Services CriteriaTrust & AssuranceVoluntary attestation
Your application is in production and handles customer data requiring independent assurance.
Optional: base condition met, but no additional signal beyond production.
A voluntary attestation framework (AICPA Trust Services Criteria) driven by customer and contractual demand, not law.

Not Applicable Regulations

DPDPA 2023Privacy & Data Protection
Excluded: none of 'primary_jurisdiction', 'offers_goods_services_to_india' match the conditions required for this framework.
DPDPA Rules, 2025Privacy & Data Protection
Excluded: none of 'primary_jurisdiction', 'offers_goods_services_to_india' match the conditions required for this framework.
EU AI ActAI Governance & Responsible AI
Excluded: 'ai_usage' does not match the condition required for this framework.
RBI FREE-AI FrameworkAI Governance & Responsible AI
Excluded: 'ai_usage' does not match the condition required for this framework.
SEBI AI/ML GuidelinesAI Governance & Responsible AI
Excluded: 'ai_usage' does not match the condition required for this framework.
RBI Digital Payment Security ControlsPayments & Financial Security
Excluded: 'processes_payments' does not match the condition required for this framework.
PCI DSSPayments & Financial Security
Excluded: 'processes_payments' does not match the condition required for this framework.
RBI IT Governance & Risk ControlsCybersecurity & Operational Security
Excluded: 'regulated_financial_entity' does not match the condition required for this framework.
RBI NBFC IT FrameworkFinancial Sector Regulations
Excluded: 'regulated_financial_entity' does not match the condition required for this framework.
RBI NBFC Outsourcing DirectionsFinancial Sector Regulations
Excluded: 'regulated_financial_entity' does not match the condition required for this framework.
RBI Outsourcing DirectionsFinancial Sector Regulations
Excluded: 'regulated_financial_entity' does not match the condition required for this framework.
RBI Payments Banks Outsourcing DirectionsFinancial Sector Regulations
Excluded: 'regulated_financial_entity' does not match the condition required for this framework.
RBI Small Finance Banks Outsourcing DirectionsFinancial Sector Regulations
Excluded: 'regulated_financial_entity' does not match the condition required for this framework.
SEBI Cybersecurity FrameworkCybersecurity & Operational Security
Excluded: 'regulated_financial_entity' does not match the condition required for this framework.
CERT-In DirectionsCybersecurity & Operational Security
Excluded: 'primary_jurisdiction' does not match the condition required for this framework.
NIST AI RMFAI Governance & Responsible AI
Excluded: 'ai_usage' does not match the condition required for this framework.

Needs More Information

Not enough was known to confirm or rule these out — Meridian conservatively evaluates their controls below until you provide the missing details.

HIPAA Security RulePrivacy & Data Protection
Not enough information yet: handles_health_data not answered.

Compliance Readiness

Implemented

Authentication Cross Border Transfer Controls Data Classification Data Lifecycle Management

Code Improvement Recommended

Access Control Audit Logging Consent Management Data Retention Encryption At Rest Encryption In Transit Key Management

Requires Documentation

Asset Inventory Backup And Recovery Business Impact Analysis Configuration Management Data Deletion Data Masking Data Protection Impact Assessment Data Subject Request Handling Grievance Redressal Incident Response Plan Information Security Policy Log Retention Policy Management Privacy Impact Assessment Records Of Processing

Requires Operational Evidence

AI Risk Assessment Access Review BCP And DR Testing Bias Detection Change Management Data Loss Prevention Data Quality Management Governance Framework Incident Detection Maker Checker Model Monitoring Model Testing Patch Management Penetration Testing Physical Access Control Privileged Access Management Regulatory Change Monitoring Regulatory Reporting SOC Operations Security Awareness Training Third Party Risk Assessment Vendor Contract Management Vulnerability Scanning

Enterprise Readiness

Detected

Authentication

Recommended Improvements

Access Control Audit Logging Encryption At Rest Encryption In Transit Key Management Data Retention

Operational Requirements

Privileged Access Management BCP And DR Testing Penetration Testing Third Party Risk Assessment Vendor Contract Management Security Awareness Training

Documentation Required

Incident Response Plan Information Security Policy

SOC 2 Scope

The subset of the capabilities above that SOC 2's own controls actually reach.

Detected

Authentication

Recommended Improvements

Access Control Audit Logging Encryption At Rest Encryption In Transit Key Management Data Retention

Operational Requirements

Privileged Access Management BCP And DR Testing Penetration Testing Third Party Risk Assessment Vendor Contract Management Security Awareness Training

Documentation Required

Incident Response Plan

Top Priorities

  1. Access Control (CRITICAL) — Can the organization (as a non-EU controller/processor) demonstrate that it has designated a representative in the Union?
    Improves compliance posture for: GDPR, HIPAA Security Rule, SOC 2 Trust Services Criteria.
  2. Encryption In Transit (CRITICAL) — Can the organization demonstrate that it discontinues logical and physical protections over physical assets only after data and software are no longer recoverable?
    Improves compliance posture for: SOC 2 Trust Services Criteria.
  3. Encryption At Rest (CRITICAL) — Can the organization demonstrate that it discontinues logical and physical protections over physical assets only after data and software are no longer recoverable?
    Improves compliance posture for: SOC 2 Trust Services Criteria.
  4. Key Management (CRITICAL) — Can the organization demonstrate that it discontinues logical and physical protections over physical assets only after data and software are no longer recoverable?
    Improves compliance posture for: SOC 2 Trust Services Criteria.
  5. Consent Management (HIGH) — Can the organization demonstrate that it provides information free of charge and has procedures for manifestly unfounded or excessive requests?
    Improves compliance posture for: GDPR, SOC 2 Trust Services Criteria.

Full breakdown by effort below.

Recommended Actions

Quick Wins

  • Access Control (CRITICAL)
    Can the organization (as a non-EU controller/processor) demonstrate that it has designated a representative in the Union?
    Improves compliance posture for: GDPR, HIPAA Security Rule, SOC 2 Trust Services Criteria.
  • Encryption In Transit (CRITICAL)
    Can the organization demonstrate that it discontinues logical and physical protections over physical assets only after data and software are no longer recoverable?
    Improves compliance posture for: SOC 2 Trust Services Criteria.
  • Encryption At Rest (CRITICAL)
    Can the organization demonstrate that it discontinues logical and physical protections over physical assets only after data and software are no longer recoverable?
    Improves compliance posture for: SOC 2 Trust Services Criteria.
  • Log Retention (MEDIUM)
    Does the organization monitor log-in attempts to systems containing electronic protected health information and report discrepancies?
    Improves compliance posture for: HIPAA Security Rule.

Medium Effort

  • Key Management (CRITICAL)
    Can the organization demonstrate that it discontinues logical and physical protections over physical assets only after data and software are no longer recoverable?
    Improves compliance posture for: SOC 2 Trust Services Criteria.
  • Consent Management (HIGH)
    Can the organization demonstrate that it provides information free of charge and has procedures for manifestly unfounded or excessive requests?
    Improves compliance posture for: GDPR, SOC 2 Trust Services Criteria.
  • Privileged Access Management (HIGH)
    Can the organization demonstrate that it does not make decisions based solely on automated processing that produce legal or significant effects, without appropriate safeguards?
    Improves compliance posture for: GDPR, SOC 2 Trust Services Criteria.
  • Audit Logging (HIGH)
    Can the organization demonstrate that it has properly applied exceptions to breach communication to data subjects?
    Improves compliance posture for: GDPR, HIPAA Security Rule, SOC 2 Trust Services Criteria.
  • Incident Response Plan (HIGH)
    Has the organization conducted and documented a risk analysis assessing threats and vulnerabilities to the confidentiality, integrity, and availability of electronic protected health information?
    Improves compliance posture for: HIPAA Security Rule, SOC 2 Trust Services Criteria.
  • Backup And Recovery (HIGH)
    Does the organization maintain retrievable, exact backup copies of electronic protected health information?
    Improves compliance posture for: HIPAA Security Rule, SOC 2 Trust Services Criteria.
  • Data Retention (HIGH)
    Can the organization demonstrate that it implements policies and procedures to store inputs, items in processing, and outputs completely, accurately, and timely in accordance with system specifications?
    Improves compliance posture for: SOC 2 Trust Services Criteria.
  • Records Of Processing (MEDIUM)
    Can the organization demonstrate that processing of criminal conviction data is under official control or authorised by law with appropriate safeguards?
    Improves compliance posture for: GDPR, HIPAA Security Rule, SOC 2 Trust Services Criteria.
  • Data Masking (MEDIUM)
    Can the organization demonstrate that processing of criminal conviction data is under official control or authorised by law with appropriate safeguards?
    Improves compliance posture for: GDPR, SOC 2 Trust Services Criteria.
  • Maker Checker (MEDIUM)
    Can the organization demonstrate that it does not make decisions based solely on automated processing that produce legal or significant effects, without appropriate safeguards?
    Improves compliance posture for: GDPR, SOC 2 Trust Services Criteria.
  • Model Testing (MEDIUM)
    Can the organization demonstrate that it does not make decisions based solely on automated processing that produce legal or significant effects, without appropriate safeguards?
    Improves compliance posture for: GDPR.
  • Business Impact Analysis (MEDIUM)
    Can the organization demonstrate that it has assessed the risks to personal data when determining security measures?
    Improves compliance posture for: GDPR, HIPAA Security Rule, SOC 2 Trust Services Criteria.
  • Configuration Management (MEDIUM)
    Has the organization conducted and documented a risk analysis assessing threats and vulnerabilities to the confidentiality, integrity, and availability of electronic protected health information?
    Improves compliance posture for: HIPAA Security Rule.
  • Asset Inventory (MEDIUM)
    Has the organization conducted and documented a risk analysis assessing threats and vulnerabilities to the confidentiality, integrity, and availability of electronic protected health information?
    Improves compliance posture for: HIPAA Security Rule.
  • Data Lifecycle Management (MEDIUM)
    Does the organization have documented policies for the final disposition of electronic protected health information and the media it is stored on?
    Improves compliance posture for: HIPAA Security Rule, SOC 2 Trust Services Criteria.
  • Information Security Policy (MEDIUM)
    Has the organization implemented documented policies and procedures reasonably designed to comply with the HIPAA Security Rule's standards and implementation specifications?
    Improves compliance posture for: HIPAA Security Rule.
  • Data Classification (MEDIUM)
    Can the organization demonstrate that it discontinues logical and physical protections over physical assets only after data and software are no longer recoverable?
    Improves compliance posture for: SOC 2 Trust Services Criteria.
  • Policy Management (LOW)
    Can the organization demonstrate that processing of criminal conviction data is under official control or authorised by law with appropriate safeguards?
    Improves compliance posture for: GDPR, HIPAA Security Rule, SOC 2 Trust Services Criteria.
  • Security Awareness Training (LOW)
    Can the organization demonstrate that it does not make decisions based solely on automated processing that produce legal or significant effects, without appropriate safeguards?
    Improves compliance posture for: GDPR, SOC 2 Trust Services Criteria.
  • Data Quality Management (INFORMATIONAL)
    Can the organization demonstrate that it does not make decisions based solely on automated processing that produce legal or significant effects, without appropriate safeguards?
    Improves compliance posture for: GDPR.

Strategic Initiatives

  • AI Risk Assessment (HIGH)
    Can the organization demonstrate that it does not make decisions based solely on automated processing that produce legal or significant effects, without appropriate safeguards?
    Improves compliance posture for: GDPR, SOC 2 Trust Services Criteria.
  • Bias Detection (HIGH)
    Can the organization demonstrate that it does not make decisions based solely on automated processing that produce legal or significant effects, without appropriate safeguards?
    Improves compliance posture for: GDPR.
  • Data Loss Prevention (HIGH)
    Can the organization demonstrate that automated decision-making based on special category data is only done with explicit consent or substantial public interest and appropriate safeguards?
    Improves compliance posture for: GDPR.
  • Data Protection Impact Assessment (HIGH)
    Can the organization demonstrate that it has assessed the risks to personal data when determining security measures?
    Improves compliance posture for: GDPR, SOC 2 Trust Services Criteria.
  • Privacy Impact Assessment (HIGH)
    Can the organization demonstrate that it has assessed the risks to personal data when determining security measures?
    Improves compliance posture for: GDPR, SOC 2 Trust Services Criteria.
  • Model Monitoring (MEDIUM)
    Can the organization demonstrate that it does not make decisions based solely on automated processing that produce legal or significant effects, without appropriate safeguards?
    Improves compliance posture for: GDPR.
  • Physical Access Control (MEDIUM)
    Can the organization demonstrate that automated decision-making based on special category data is only done with explicit consent or substantial public interest and appropriate safeguards?
    Improves compliance posture for: GDPR.

Compliance Roadmap

Now · Quick Wins

  • Access Control
  • Encryption In Transit
  • Encryption At Rest
  • Log Retention

Next · Medium Effort

  • Key Management
  • Consent Management
  • Privileged Access Management
  • Audit Logging
  • Incident Response Plan
  • Backup And Recovery
  • Data Retention
  • Records Of Processing
  • Data Masking
  • Maker Checker
  • Model Testing
  • Business Impact Analysis
  • Configuration Management
  • Asset Inventory
  • Data Lifecycle Management
  • Information Security Policy
  • Data Classification
  • Policy Management
  • Security Awareness Training
  • Data Quality Management

Later · Strategic Initiatives

  • AI Risk Assessment
  • Bias Detection
  • Data Loss Prevention
  • Data Protection Impact Assessment
  • Privacy Impact Assessment
  • Model Monitoring
  • Physical Access Control

Next Steps

Start with Top Priorities above, then work through the full Quick Wins/Medium Effort/Strategic Initiatives breakdown. Technical Findings below show exactly where each gap was detected in your repository; export to PDF/HTML for a shareable version, or JSON/SARIF to feed a CI pipeline.

Technical Findings (59)

Showing top 50 of 59, ranked by severity then confidence. Export to JSON or SARIF for the complete list.

Critical SOC2_CC6_6 — External Threat Protection Code Improvement Recommended
Satisfied: Data Classification
Missing: Access Control, Audit Logging, Encryption At Rest, Encryption In Transit, Key Management
packages/features/auth/lib/verifyEmail.ts:23-23 (data_classification)
apps/api/v2/src/modules/verified-resources/outputs/verified-email.output.ts:24-31 (data_classification)
apps/api/v2/src/modules/atoms/inputs/add-verified-email.input.ts:5-7 (data_classification)
apps/api/v2/src/modules/users/inputs/create-managed-user.input.ts:12-14 (data_classification)
packages/platform/types/calendars/inputs/create-calendar-credentials.input.ts:12-16 (data_classification)
apps/web/components/apps/exchangecalendar/Setup.tsx:22-22 (data_classification)
apps/api/v2/src/modules/users/outputs/get-users.output.ts:43-51 (data_classification)
apps/api/v2/src/platform/bookings/2024-04-15/outputs/get-booking.output.ts:67-69 (data_classification)
apps/api/v2/src/modules/cal-unified-calendars/outputs/get-unified-calendar-event.output.ts:106-112 (data_classification)
apps/web/components/dialog/WrongAssignmentDialog.tsx:52-52 (data_classification)
packages/platform/types/bookings/2024-08-13/inputs/mark-absent.input.ts:6-8 (data_classification)
apps/api/v2/src/platform/calendars/outputs/connected-calendars.output.ts:161-164 (data_classification)
apps/api/v2/src/modules/cal-unified-calendars/outputs/get-unified-calendar-event.output.ts:244-248 (data_classification)
apps/api/v2/src/platform/bookings/2024-08-13/outputs/remove-attendee.output.ts:31-37 (data_classification)
apps/api/v2/src/modules/atoms/inputs/verify-email-code.input.ts:5-7 (data_classification)
packages/platform/types/event-types/event-types_2024_06_14/inputs/locations.input.ts:105-107 (data_classification)
apps/web/components/settings/DisableTwoFactorModal.tsx:29-29 (data_classification)
apps/api/v2/src/platform/calendars/outputs/connected-calendars.output.ts:118-121 (data_classification)
apps/api/v2/src/modules/verified-resources/inputs/request-phone-verification.input.ts:6-13 (data_classification)
packages/features/tasker/tasks/crm/__tests__/createCRMEvent.test.ts:12-12 (data_classification)
apps/api/v2/src/modules/users/inputs/update-managed-user.input.ts:11-14 (data_classification)
apps/web/components/booking/BookingListItem.tsx:717-717 (data_classification)
apps/api/v2/src/platform/bookings/2024-04-15/outputs/get-booking.output.ts:85-87 (data_classification)
apps/api/v2/src/platform/calendars/outputs/connected-calendars.output.ts:258-261 (data_classification)
apps/api/v2/src/platform/bookings/2024-04-15/inputs/create-booking.input.ts:67-71 (data_classification)
apps/api/v2/src/platform/bookings/2024-04-15/outputs/mark-no-show.output.ts:8-10 (data_classification)
apps/api/v2/src/platform/bookings/2024-04-15/outputs/get-booking.output.ts:39-41 (data_classification)
apps/api/v2/src/platform/bookings/2024-04-15/inputs/mark-no-show.input.ts:6-8 (data_classification)
apps/web/components/security/DisableTwoFactorModal.tsx:25-25 (data_classification)
apps/api/v2/src/modules/cal-unified-calendars/outputs/list-connections.output.ts:22-29 (data_classification)
apps/api/v2/src/modules/atoms/inputs/send-verification-email.input.ts:5-7 (data_classification)
apps/api/v2/src/modules/cal-unified-calendars/outputs/get-unified-calendar-event.output.ts:161-167 (data_classification)
packages/features/url-shortener/providers/SinkClient.ts:10-10 (data_classification)
apps/api/v2/src/modules/cal-unified-calendars/outputs/get-unified-calendar-event.output.ts:51-57 (data_classification)
packages/platform/types/bookings/2024-08-13/inputs/update-location.input.ts:41-44 (data_classification)
packages/features/calendars/components/DestinationCalendarSelector.tsx:39-39 (data_classification)
packages/emails/templates/slug-replacement-email.ts:9-9 (data_classification)
apps/api/v2/src/platform/me/outputs/me.output.ts:22-24 (data_classification)
packages/lib/builders/CalendarEvent/builder.ts:32-32 (data_classification)
apps/api/v2/src/modules/users/inputs/create-user.input.ts:26-34 (data_classification)
packages/sms/test/sms-manager.test.ts:12-12 (data_classification)
packages/platform/atoms/hooks/useVerifyEmail.ts:24-24 (data_classification)
apps/web/modules/auth/login-view.tsx:32-32 (data_classification)
apps/api/v2/src/modules/verified-resources/inputs/verify-phone.input.ts:6-13 (data_classification)
packages/platform/types/bookings/2024-08-13/inputs/location.input.ts:116-118 (data_classification)
apps/api/v2/src/modules/verified-resources/inputs/request-email-verification.input.ts:6-13 (data_classification)
packages/platform/types/bookings/2024-08-13/outputs/booking.output.ts:404-407 (data_classification)
packages/platform/types/bookings/2024-08-13/inputs/add-attendee.input.ts:6-12 (data_classification)
packages/features/users/services/userCreationService.ts:11-11 (data_classification)
packages/app-store/hitpay/api/webhook.ts:24-24 (data_classification)
apps/web/modules/users/components/UserForm.tsx:19-19 (data_classification)
apps/api/v2/src/modules/ooo/inputs/ooo.input.ts:119-127 (data_classification)
apps/api/v2/src/modules/cal-unified-calendars/inputs/create-unified-calendar-event.input.ts:32-37 (data_classification)
packages/emails/templates/disabled-app-email.ts:9-9 (data_classification)
apps/web/components/settings/SecondaryEmailConfirmModal.tsx:7-7 (data_classification)
packages/features/watchlist/lib/freeEmailDomainCheck/checkIfFreeEmailDomain.ts:7-7 (data_classification)
apps/api/v2/src/modules/atoms/inputs/check-email-verification-required-params.ts:5-7 (data_classification)
packages/platform/types/bookings/2024-08-13/inputs/create-booking.input.ts:143-152 (data_classification)
apps/api/v2/src/platform/calendars/outputs/connected-calendars.output.ts:86-88 (data_classification)
packages/features/auth/__mocks__/getServerSession.mocks.ts:23-23 (data_classification)
packages/platform/types/slots/slots-2024-04-15/inputs/index.ts:134-138 (data_classification)
apps/web/modules/users/views/users-edit-view.tsx:13-13 (data_classification)
apps/api/v2/src/modules/cal-unified-calendars/pipes/google-calendar-event-input-pipe.ts:19-19 (data_classification)
packages/platform/atoms/hooks/useVerifyCode.ts:16-16 (data_classification)
packages/platform/types/bookings/2024-08-13/outputs/booking.output.ts:27-30 (data_classification)
packages/platform/types/bookings/2024-08-13/inputs/add-guests.input.ts:21-27 (data_classification)
apps/api/v2/src/modules/cal-unified-calendars/outputs/get-unified-calendar-event.output.ts:228-232 (data_classification)
packages/platform/types/bookings/2024-08-13/outputs/booking.output.ts:98-101 (data_classification)
apps/api/v2/src/modules/cal-unified-calendars/outputs/get-unified-calendar-event.output.ts:200-204 (data_classification)
packages/features/watchlist/operations/check-if-email-in-watchlist.controller.ts:7-7 (data_classification)
apps/api/v2/src/modules/cal-unified-calendars/inputs/update-unified-calendar-event.input.ts:10-15 (data_classification)
apps/api/v2/src/modules/oauth-clients/controllers/oauth-client-users/outputs/managed-user.output.ts:11-13 (data_classification)
apps/api/v2/src/platform/bookings/2024-04-15/outputs/get-bookings.output.ts:34-36 (data_classification)
apps/api/v2/src/modules/verified-resources/inputs/verify-email.input.ts:6-13 (data_classification)
apps/api/v2/src/platform/bookings/2024-04-15/outputs/get-bookings.output.ts:160-162 (data_classification)
apps/api/v2/src/modules/verified-resources/outputs/verified-email.output.ts:51-58 (data_classification)
packages/features/auth/signup/utils/prefillAvatar.ts:9-9 (data_classification)
Critical SOC2_CC6_8 — Unauthorized and Malicious Software Control Code Improvement Recommended
Satisfied: Data Classification
Missing: Access Control, Audit Logging, Encryption At Rest, Encryption In Transit, Key Management
packages/features/auth/lib/verifyEmail.ts:23-23 (data_classification)
apps/api/v2/src/modules/verified-resources/outputs/verified-email.output.ts:24-31 (data_classification)
apps/api/v2/src/modules/atoms/inputs/add-verified-email.input.ts:5-7 (data_classification)
apps/api/v2/src/modules/users/inputs/create-managed-user.input.ts:12-14 (data_classification)
packages/platform/types/calendars/inputs/create-calendar-credentials.input.ts:12-16 (data_classification)
apps/web/components/apps/exchangecalendar/Setup.tsx:22-22 (data_classification)
apps/api/v2/src/modules/users/outputs/get-users.output.ts:43-51 (data_classification)
apps/api/v2/src/platform/bookings/2024-04-15/outputs/get-booking.output.ts:67-69 (data_classification)
apps/api/v2/src/modules/cal-unified-calendars/outputs/get-unified-calendar-event.output.ts:106-112 (data_classification)
apps/web/components/dialog/WrongAssignmentDialog.tsx:52-52 (data_classification)
packages/platform/types/bookings/2024-08-13/inputs/mark-absent.input.ts:6-8 (data_classification)
apps/api/v2/src/platform/calendars/outputs/connected-calendars.output.ts:161-164 (data_classification)
apps/api/v2/src/modules/cal-unified-calendars/outputs/get-unified-calendar-event.output.ts:244-248 (data_classification)
apps/api/v2/src/platform/bookings/2024-08-13/outputs/remove-attendee.output.ts:31-37 (data_classification)
apps/api/v2/src/modules/atoms/inputs/verify-email-code.input.ts:5-7 (data_classification)
packages/platform/types/event-types/event-types_2024_06_14/inputs/locations.input.ts:105-107 (data_classification)
apps/web/components/settings/DisableTwoFactorModal.tsx:29-29 (data_classification)
apps/api/v2/src/platform/calendars/outputs/connected-calendars.output.ts:118-121 (data_classification)
apps/api/v2/src/modules/verified-resources/inputs/request-phone-verification.input.ts:6-13 (data_classification)
packages/features/tasker/tasks/crm/__tests__/createCRMEvent.test.ts:12-12 (data_classification)
apps/api/v2/src/modules/users/inputs/update-managed-user.input.ts:11-14 (data_classification)
apps/web/components/booking/BookingListItem.tsx:717-717 (data_classification)
apps/api/v2/src/platform/bookings/2024-04-15/outputs/get-booking.output.ts:85-87 (data_classification)
apps/api/v2/src/platform/calendars/outputs/connected-calendars.output.ts:258-261 (data_classification)
apps/api/v2/src/platform/bookings/2024-04-15/inputs/create-booking.input.ts:67-71 (data_classification)
apps/api/v2/src/platform/bookings/2024-04-15/outputs/mark-no-show.output.ts:8-10 (data_classification)
apps/api/v2/src/platform/bookings/2024-04-15/outputs/get-booking.output.ts:39-41 (data_classification)
apps/api/v2/src/platform/bookings/2024-04-15/inputs/mark-no-show.input.ts:6-8 (data_classification)
apps/web/components/security/DisableTwoFactorModal.tsx:25-25 (data_classification)
apps/api/v2/src/modules/cal-unified-calendars/outputs/list-connections.output.ts:22-29 (data_classification)
apps/api/v2/src/modules/atoms/inputs/send-verification-email.input.ts:5-7 (data_classification)
apps/api/v2/src/modules/cal-unified-calendars/outputs/get-unified-calendar-event.output.ts:161-167 (data_classification)
packages/features/url-shortener/providers/SinkClient.ts:10-10 (data_classification)
apps/api/v2/src/modules/cal-unified-calendars/outputs/get-unified-calendar-event.output.ts:51-57 (data_classification)
packages/platform/types/bookings/2024-08-13/inputs/update-location.input.ts:41-44 (data_classification)
packages/features/calendars/components/DestinationCalendarSelector.tsx:39-39 (data_classification)
packages/emails/templates/slug-replacement-email.ts:9-9 (data_classification)
apps/api/v2/src/platform/me/outputs/me.output.ts:22-24 (data_classification)
packages/lib/builders/CalendarEvent/builder.ts:32-32 (data_classification)
apps/api/v2/src/modules/users/inputs/create-user.input.ts:26-34 (data_classification)
packages/sms/test/sms-manager.test.ts:12-12 (data_classification)
packages/platform/atoms/hooks/useVerifyEmail.ts:24-24 (data_classification)
apps/web/modules/auth/login-view.tsx:32-32 (data_classification)
apps/api/v2/src/modules/verified-resources/inputs/verify-phone.input.ts:6-13 (data_classification)
packages/platform/types/bookings/2024-08-13/inputs/location.input.ts:116-118 (data_classification)
apps/api/v2/src/modules/verified-resources/inputs/request-email-verification.input.ts:6-13 (data_classification)
packages/platform/types/bookings/2024-08-13/outputs/booking.output.ts:404-407 (data_classification)
packages/platform/types/bookings/2024-08-13/inputs/add-attendee.input.ts:6-12 (data_classification)
packages/features/users/services/userCreationService.ts:11-11 (data_classification)
packages/app-store/hitpay/api/webhook.ts:24-24 (data_classification)
apps/web/modules/users/components/UserForm.tsx:19-19 (data_classification)
apps/api/v2/src/modules/ooo/inputs/ooo.input.ts:119-127 (data_classification)
apps/api/v2/src/modules/cal-unified-calendars/inputs/create-unified-calendar-event.input.ts:32-37 (data_classification)
packages/emails/templates/disabled-app-email.ts:9-9 (data_classification)
apps/web/components/settings/SecondaryEmailConfirmModal.tsx:7-7 (data_classification)
packages/features/watchlist/lib/freeEmailDomainCheck/checkIfFreeEmailDomain.ts:7-7 (data_classification)
apps/api/v2/src/modules/atoms/inputs/check-email-verification-required-params.ts:5-7 (data_classification)
packages/platform/types/bookings/2024-08-13/inputs/create-booking.input.ts:143-152 (data_classification)
apps/api/v2/src/platform/calendars/outputs/connected-calendars.output.ts:86-88 (data_classification)
packages/features/auth/__mocks__/getServerSession.mocks.ts:23-23 (data_classification)
packages/platform/types/slots/slots-2024-04-15/inputs/index.ts:134-138 (data_classification)
apps/web/modules/users/views/users-edit-view.tsx:13-13 (data_classification)
apps/api/v2/src/modules/cal-unified-calendars/pipes/google-calendar-event-input-pipe.ts:19-19 (data_classification)
packages/platform/atoms/hooks/useVerifyCode.ts:16-16 (data_classification)
packages/platform/types/bookings/2024-08-13/outputs/booking.output.ts:27-30 (data_classification)
packages/platform/types/bookings/2024-08-13/inputs/add-guests.input.ts:21-27 (data_classification)
apps/api/v2/src/modules/cal-unified-calendars/outputs/get-unified-calendar-event.output.ts:228-232 (data_classification)
packages/platform/types/bookings/2024-08-13/outputs/booking.output.ts:98-101 (data_classification)
apps/api/v2/src/modules/cal-unified-calendars/outputs/get-unified-calendar-event.output.ts:200-204 (data_classification)
packages/features/watchlist/operations/check-if-email-in-watchlist.controller.ts:7-7 (data_classification)
apps/api/v2/src/modules/cal-unified-calendars/inputs/update-unified-calendar-event.input.ts:10-15 (data_classification)
apps/api/v2/src/modules/oauth-clients/controllers/oauth-client-users/outputs/managed-user.output.ts:11-13 (data_classification)
apps/api/v2/src/platform/bookings/2024-04-15/outputs/get-bookings.output.ts:34-36 (data_classification)
apps/api/v2/src/modules/verified-resources/inputs/verify-email.input.ts:6-13 (data_classification)
apps/api/v2/src/platform/bookings/2024-04-15/outputs/get-bookings.output.ts:160-162 (data_classification)
apps/api/v2/src/modules/verified-resources/outputs/verified-email.output.ts:51-58 (data_classification)
packages/features/auth/signup/utils/prefillAvatar.ts:9-9 (data_classification)
Critical GDPR_ART_28_001 — Processor - Selection and Guarantees Code Improvement Recommended
Missing: Access Control
Critical GDPR_ART_58_002 — Supervisory Authority - Corrective Powers Code Improvement Recommended
Missing: Audit Logging
Critical GDPR_ART_5_001 — Lawfulness, Fairness and Transparency Code Improvement Recommended
Missing: Consent Management
Critical GDPR_ART_6_001 — Lawful Processing - Consent Code Improvement Recommended
Missing: Consent Management
Critical GDPR_ART_7_001 — Demonstration of Consent Code Improvement Recommended
Missing: Consent Management
Critical GDPR_ART_83_001 — Administrative Fines - General Conditions Code Improvement Recommended
Missing: Audit Logging
Critical HIPAA_308_A6_001 — Security Incident Procedures -- Response and Reporting Code Improvement Recommended
Missing: Audit Logging
Critical SOC2_CC7_3 — Security Event Evaluation Code Improvement Recommended
Missing: Audit Logging
Critical SOC2_CC7_4 — Incident Response Program Execution Code Improvement Recommended
Missing: Audit Logging
Critical SOC2_P6_6 — Notification of Breaches and Incidents Code Improvement Recommended
Missing: Audit Logging, Consent Management
High SOC2_P3_1 — Collection of Personal Information Code Improvement Recommended
Satisfied: Data Classification
Missing: Access Control, Consent Management, Encryption At Rest, Encryption In Transit, Key Management
packages/features/auth/lib/verifyEmail.ts:23-23 (data_classification)
apps/api/v2/src/modules/verified-resources/outputs/verified-email.output.ts:24-31 (data_classification)
apps/api/v2/src/modules/atoms/inputs/add-verified-email.input.ts:5-7 (data_classification)
apps/api/v2/src/modules/users/inputs/create-managed-user.input.ts:12-14 (data_classification)
packages/platform/types/calendars/inputs/create-calendar-credentials.input.ts:12-16 (data_classification)
apps/web/components/apps/exchangecalendar/Setup.tsx:22-22 (data_classification)
apps/api/v2/src/modules/users/outputs/get-users.output.ts:43-51 (data_classification)
apps/api/v2/src/platform/bookings/2024-04-15/outputs/get-booking.output.ts:67-69 (data_classification)
apps/api/v2/src/modules/cal-unified-calendars/outputs/get-unified-calendar-event.output.ts:106-112 (data_classification)
apps/web/components/dialog/WrongAssignmentDialog.tsx:52-52 (data_classification)
packages/platform/types/bookings/2024-08-13/inputs/mark-absent.input.ts:6-8 (data_classification)
apps/api/v2/src/platform/calendars/outputs/connected-calendars.output.ts:161-164 (data_classification)
apps/api/v2/src/modules/cal-unified-calendars/outputs/get-unified-calendar-event.output.ts:244-248 (data_classification)
apps/api/v2/src/platform/bookings/2024-08-13/outputs/remove-attendee.output.ts:31-37 (data_classification)
apps/api/v2/src/modules/atoms/inputs/verify-email-code.input.ts:5-7 (data_classification)
packages/platform/types/event-types/event-types_2024_06_14/inputs/locations.input.ts:105-107 (data_classification)
apps/web/components/settings/DisableTwoFactorModal.tsx:29-29 (data_classification)
apps/api/v2/src/platform/calendars/outputs/connected-calendars.output.ts:118-121 (data_classification)
apps/api/v2/src/modules/verified-resources/inputs/request-phone-verification.input.ts:6-13 (data_classification)
packages/features/tasker/tasks/crm/__tests__/createCRMEvent.test.ts:12-12 (data_classification)
apps/api/v2/src/modules/users/inputs/update-managed-user.input.ts:11-14 (data_classification)
apps/web/components/booking/BookingListItem.tsx:717-717 (data_classification)
apps/api/v2/src/platform/bookings/2024-04-15/outputs/get-booking.output.ts:85-87 (data_classification)
apps/api/v2/src/platform/calendars/outputs/connected-calendars.output.ts:258-261 (data_classification)
apps/api/v2/src/platform/bookings/2024-04-15/inputs/create-booking.input.ts:67-71 (data_classification)
apps/api/v2/src/platform/bookings/2024-04-15/outputs/mark-no-show.output.ts:8-10 (data_classification)
apps/api/v2/src/platform/bookings/2024-04-15/outputs/get-booking.output.ts:39-41 (data_classification)
apps/api/v2/src/platform/bookings/2024-04-15/inputs/mark-no-show.input.ts:6-8 (data_classification)
apps/web/components/security/DisableTwoFactorModal.tsx:25-25 (data_classification)
apps/api/v2/src/modules/cal-unified-calendars/outputs/list-connections.output.ts:22-29 (data_classification)
apps/api/v2/src/modules/atoms/inputs/send-verification-email.input.ts:5-7 (data_classification)
apps/api/v2/src/modules/cal-unified-calendars/outputs/get-unified-calendar-event.output.ts:161-167 (data_classification)
packages/features/url-shortener/providers/SinkClient.ts:10-10 (data_classification)
apps/api/v2/src/modules/cal-unified-calendars/outputs/get-unified-calendar-event.output.ts:51-57 (data_classification)
packages/platform/types/bookings/2024-08-13/inputs/update-location.input.ts:41-44 (data_classification)
packages/features/calendars/components/DestinationCalendarSelector.tsx:39-39 (data_classification)
packages/emails/templates/slug-replacement-email.ts:9-9 (data_classification)
apps/api/v2/src/platform/me/outputs/me.output.ts:22-24 (data_classification)
packages/lib/builders/CalendarEvent/builder.ts:32-32 (data_classification)
apps/api/v2/src/modules/users/inputs/create-user.input.ts:26-34 (data_classification)
packages/sms/test/sms-manager.test.ts:12-12 (data_classification)
packages/platform/atoms/hooks/useVerifyEmail.ts:24-24 (data_classification)
apps/web/modules/auth/login-view.tsx:32-32 (data_classification)
apps/api/v2/src/modules/verified-resources/inputs/verify-phone.input.ts:6-13 (data_classification)
packages/platform/types/bookings/2024-08-13/inputs/location.input.ts:116-118 (data_classification)
apps/api/v2/src/modules/verified-resources/inputs/request-email-verification.input.ts:6-13 (data_classification)
packages/platform/types/bookings/2024-08-13/outputs/booking.output.ts:404-407 (data_classification)
packages/platform/types/bookings/2024-08-13/inputs/add-attendee.input.ts:6-12 (data_classification)
packages/features/users/services/userCreationService.ts:11-11 (data_classification)
packages/app-store/hitpay/api/webhook.ts:24-24 (data_classification)
apps/web/modules/users/components/UserForm.tsx:19-19 (data_classification)
apps/api/v2/src/modules/ooo/inputs/ooo.input.ts:119-127 (data_classification)
apps/api/v2/src/modules/cal-unified-calendars/inputs/create-unified-calendar-event.input.ts:32-37 (data_classification)
packages/emails/templates/disabled-app-email.ts:9-9 (data_classification)
apps/web/components/settings/SecondaryEmailConfirmModal.tsx:7-7 (data_classification)
packages/features/watchlist/lib/freeEmailDomainCheck/checkIfFreeEmailDomain.ts:7-7 (data_classification)
apps/api/v2/src/modules/atoms/inputs/check-email-verification-required-params.ts:5-7 (data_classification)
packages/platform/types/bookings/2024-08-13/inputs/create-booking.input.ts:143-152 (data_classification)
apps/api/v2/src/platform/calendars/outputs/connected-calendars.output.ts:86-88 (data_classification)
packages/features/auth/__mocks__/getServerSession.mocks.ts:23-23 (data_classification)
packages/platform/types/slots/slots-2024-04-15/inputs/index.ts:134-138 (data_classification)
apps/web/modules/users/views/users-edit-view.tsx:13-13 (data_classification)
apps/api/v2/src/modules/cal-unified-calendars/pipes/google-calendar-event-input-pipe.ts:19-19 (data_classification)
packages/platform/atoms/hooks/useVerifyCode.ts:16-16 (data_classification)
packages/platform/types/bookings/2024-08-13/outputs/booking.output.ts:27-30 (data_classification)
packages/platform/types/bookings/2024-08-13/inputs/add-guests.input.ts:21-27 (data_classification)
apps/api/v2/src/modules/cal-unified-calendars/outputs/get-unified-calendar-event.output.ts:228-232 (data_classification)
packages/platform/types/bookings/2024-08-13/outputs/booking.output.ts:98-101 (data_classification)
apps/api/v2/src/modules/cal-unified-calendars/outputs/get-unified-calendar-event.output.ts:200-204 (data_classification)
packages/features/watchlist/operations/check-if-email-in-watchlist.controller.ts:7-7 (data_classification)
apps/api/v2/src/modules/cal-unified-calendars/inputs/update-unified-calendar-event.input.ts:10-15 (data_classification)
apps/api/v2/src/modules/oauth-clients/controllers/oauth-client-users/outputs/managed-user.output.ts:11-13 (data_classification)
apps/api/v2/src/platform/bookings/2024-04-15/outputs/get-bookings.output.ts:34-36 (data_classification)
apps/api/v2/src/modules/verified-resources/inputs/verify-email.input.ts:6-13 (data_classification)
apps/api/v2/src/platform/bookings/2024-04-15/outputs/get-bookings.output.ts:160-162 (data_classification)
apps/api/v2/src/modules/verified-resources/outputs/verified-email.output.ts:51-58 (data_classification)
packages/features/auth/signup/utils/prefillAvatar.ts:9-9 (data_classification)
High SOC2_P4_1 — Limitation of Personal Information Use Code Improvement Recommended
Satisfied: Data Classification
Missing: Access Control, Consent Management, Encryption At Rest, Encryption In Transit, Key Management
packages/features/auth/lib/verifyEmail.ts:23-23 (data_classification)
apps/api/v2/src/modules/verified-resources/outputs/verified-email.output.ts:24-31 (data_classification)
apps/api/v2/src/modules/atoms/inputs/add-verified-email.input.ts:5-7 (data_classification)
apps/api/v2/src/modules/users/inputs/create-managed-user.input.ts:12-14 (data_classification)
packages/platform/types/calendars/inputs/create-calendar-credentials.input.ts:12-16 (data_classification)
apps/web/components/apps/exchangecalendar/Setup.tsx:22-22 (data_classification)
apps/api/v2/src/modules/users/outputs/get-users.output.ts:43-51 (data_classification)
apps/api/v2/src/platform/bookings/2024-04-15/outputs/get-booking.output.ts:67-69 (data_classification)
apps/api/v2/src/modules/cal-unified-calendars/outputs/get-unified-calendar-event.output.ts:106-112 (data_classification)
apps/web/components/dialog/WrongAssignmentDialog.tsx:52-52 (data_classification)
packages/platform/types/bookings/2024-08-13/inputs/mark-absent.input.ts:6-8 (data_classification)
apps/api/v2/src/platform/calendars/outputs/connected-calendars.output.ts:161-164 (data_classification)
apps/api/v2/src/modules/cal-unified-calendars/outputs/get-unified-calendar-event.output.ts:244-248 (data_classification)
apps/api/v2/src/platform/bookings/2024-08-13/outputs/remove-attendee.output.ts:31-37 (data_classification)
apps/api/v2/src/modules/atoms/inputs/verify-email-code.input.ts:5-7 (data_classification)
packages/platform/types/event-types/event-types_2024_06_14/inputs/locations.input.ts:105-107 (data_classification)
apps/web/components/settings/DisableTwoFactorModal.tsx:29-29 (data_classification)
apps/api/v2/src/platform/calendars/outputs/connected-calendars.output.ts:118-121 (data_classification)
apps/api/v2/src/modules/verified-resources/inputs/request-phone-verification.input.ts:6-13 (data_classification)
packages/features/tasker/tasks/crm/__tests__/createCRMEvent.test.ts:12-12 (data_classification)
apps/api/v2/src/modules/users/inputs/update-managed-user.input.ts:11-14 (data_classification)
apps/web/components/booking/BookingListItem.tsx:717-717 (data_classification)
apps/api/v2/src/platform/bookings/2024-04-15/outputs/get-booking.output.ts:85-87 (data_classification)
apps/api/v2/src/platform/calendars/outputs/connected-calendars.output.ts:258-261 (data_classification)
apps/api/v2/src/platform/bookings/2024-04-15/inputs/create-booking.input.ts:67-71 (data_classification)
apps/api/v2/src/platform/bookings/2024-04-15/outputs/mark-no-show.output.ts:8-10 (data_classification)
apps/api/v2/src/platform/bookings/2024-04-15/outputs/get-booking.output.ts:39-41 (data_classification)
apps/api/v2/src/platform/bookings/2024-04-15/inputs/mark-no-show.input.ts:6-8 (data_classification)
apps/web/components/security/DisableTwoFactorModal.tsx:25-25 (data_classification)
apps/api/v2/src/modules/cal-unified-calendars/outputs/list-connections.output.ts:22-29 (data_classification)
apps/api/v2/src/modules/atoms/inputs/send-verification-email.input.ts:5-7 (data_classification)
apps/api/v2/src/modules/cal-unified-calendars/outputs/get-unified-calendar-event.output.ts:161-167 (data_classification)
packages/features/url-shortener/providers/SinkClient.ts:10-10 (data_classification)
apps/api/v2/src/modules/cal-unified-calendars/outputs/get-unified-calendar-event.output.ts:51-57 (data_classification)
packages/platform/types/bookings/2024-08-13/inputs/update-location.input.ts:41-44 (data_classification)
packages/features/calendars/components/DestinationCalendarSelector.tsx:39-39 (data_classification)
packages/emails/templates/slug-replacement-email.ts:9-9 (data_classification)
apps/api/v2/src/platform/me/outputs/me.output.ts:22-24 (data_classification)
packages/lib/builders/CalendarEvent/builder.ts:32-32 (data_classification)
apps/api/v2/src/modules/users/inputs/create-user.input.ts:26-34 (data_classification)
packages/sms/test/sms-manager.test.ts:12-12 (data_classification)
packages/platform/atoms/hooks/useVerifyEmail.ts:24-24 (data_classification)
apps/web/modules/auth/login-view.tsx:32-32 (data_classification)
apps/api/v2/src/modules/verified-resources/inputs/verify-phone.input.ts:6-13 (data_classification)
packages/platform/types/bookings/2024-08-13/inputs/location.input.ts:116-118 (data_classification)
apps/api/v2/src/modules/verified-resources/inputs/request-email-verification.input.ts:6-13 (data_classification)
packages/platform/types/bookings/2024-08-13/outputs/booking.output.ts:404-407 (data_classification)
packages/platform/types/bookings/2024-08-13/inputs/add-attendee.input.ts:6-12 (data_classification)
packages/features/users/services/userCreationService.ts:11-11 (data_classification)
packages/app-store/hitpay/api/webhook.ts:24-24 (data_classification)
apps/web/modules/users/components/UserForm.tsx:19-19 (data_classification)
apps/api/v2/src/modules/ooo/inputs/ooo.input.ts:119-127 (data_classification)
apps/api/v2/src/modules/cal-unified-calendars/inputs/create-unified-calendar-event.input.ts:32-37 (data_classification)
packages/emails/templates/disabled-app-email.ts:9-9 (data_classification)
apps/web/components/settings/SecondaryEmailConfirmModal.tsx:7-7 (data_classification)
packages/features/watchlist/lib/freeEmailDomainCheck/checkIfFreeEmailDomain.ts:7-7 (data_classification)
apps/api/v2/src/modules/atoms/inputs/check-email-verification-required-params.ts:5-7 (data_classification)
packages/platform/types/bookings/2024-08-13/inputs/create-booking.input.ts:143-152 (data_classification)
apps/api/v2/src/platform/calendars/outputs/connected-calendars.output.ts:86-88 (data_classification)
packages/features/auth/__mocks__/getServerSession.mocks.ts:23-23 (data_classification)
packages/platform/types/slots/slots-2024-04-15/inputs/index.ts:134-138 (data_classification)
apps/web/modules/users/views/users-edit-view.tsx:13-13 (data_classification)
apps/api/v2/src/modules/cal-unified-calendars/pipes/google-calendar-event-input-pipe.ts:19-19 (data_classification)
packages/platform/atoms/hooks/useVerifyCode.ts:16-16 (data_classification)
packages/platform/types/bookings/2024-08-13/outputs/booking.output.ts:27-30 (data_classification)
packages/platform/types/bookings/2024-08-13/inputs/add-guests.input.ts:21-27 (data_classification)
apps/api/v2/src/modules/cal-unified-calendars/outputs/get-unified-calendar-event.output.ts:228-232 (data_classification)
packages/platform/types/bookings/2024-08-13/outputs/booking.output.ts:98-101 (data_classification)
apps/api/v2/src/modules/cal-unified-calendars/outputs/get-unified-calendar-event.output.ts:200-204 (data_classification)
packages/features/watchlist/operations/check-if-email-in-watchlist.controller.ts:7-7 (data_classification)
apps/api/v2/src/modules/cal-unified-calendars/inputs/update-unified-calendar-event.input.ts:10-15 (data_classification)
apps/api/v2/src/modules/oauth-clients/controllers/oauth-client-users/outputs/managed-user.output.ts:11-13 (data_classification)
apps/api/v2/src/platform/bookings/2024-04-15/outputs/get-bookings.output.ts:34-36 (data_classification)
apps/api/v2/src/modules/verified-resources/inputs/verify-email.input.ts:6-13 (data_classification)
apps/api/v2/src/platform/bookings/2024-04-15/outputs/get-bookings.output.ts:160-162 (data_classification)
apps/api/v2/src/modules/verified-resources/outputs/verified-email.output.ts:51-58 (data_classification)
packages/features/auth/signup/utils/prefillAvatar.ts:9-9 (data_classification)
High SOC2_P5_1 — Data Subject Access to Personal Information Code Improvement Recommended
Satisfied: Data Classification
Missing: Access Control, Consent Management, Encryption At Rest, Encryption In Transit, Key Management
packages/features/auth/lib/verifyEmail.ts:23-23 (data_classification)
apps/api/v2/src/modules/verified-resources/outputs/verified-email.output.ts:24-31 (data_classification)
apps/api/v2/src/modules/atoms/inputs/add-verified-email.input.ts:5-7 (data_classification)
apps/api/v2/src/modules/users/inputs/create-managed-user.input.ts:12-14 (data_classification)
packages/platform/types/calendars/inputs/create-calendar-credentials.input.ts:12-16 (data_classification)
apps/web/components/apps/exchangecalendar/Setup.tsx:22-22 (data_classification)
apps/api/v2/src/modules/users/outputs/get-users.output.ts:43-51 (data_classification)
apps/api/v2/src/platform/bookings/2024-04-15/outputs/get-booking.output.ts:67-69 (data_classification)
apps/api/v2/src/modules/cal-unified-calendars/outputs/get-unified-calendar-event.output.ts:106-112 (data_classification)
apps/web/components/dialog/WrongAssignmentDialog.tsx:52-52 (data_classification)
packages/platform/types/bookings/2024-08-13/inputs/mark-absent.input.ts:6-8 (data_classification)
apps/api/v2/src/platform/calendars/outputs/connected-calendars.output.ts:161-164 (data_classification)
apps/api/v2/src/modules/cal-unified-calendars/outputs/get-unified-calendar-event.output.ts:244-248 (data_classification)
apps/api/v2/src/platform/bookings/2024-08-13/outputs/remove-attendee.output.ts:31-37 (data_classification)
apps/api/v2/src/modules/atoms/inputs/verify-email-code.input.ts:5-7 (data_classification)
packages/platform/types/event-types/event-types_2024_06_14/inputs/locations.input.ts:105-107 (data_classification)
apps/web/components/settings/DisableTwoFactorModal.tsx:29-29 (data_classification)
apps/api/v2/src/platform/calendars/outputs/connected-calendars.output.ts:118-121 (data_classification)
apps/api/v2/src/modules/verified-resources/inputs/request-phone-verification.input.ts:6-13 (data_classification)
packages/features/tasker/tasks/crm/__tests__/createCRMEvent.test.ts:12-12 (data_classification)
apps/api/v2/src/modules/users/inputs/update-managed-user.input.ts:11-14 (data_classification)
apps/web/components/booking/BookingListItem.tsx:717-717 (data_classification)
apps/api/v2/src/platform/bookings/2024-04-15/outputs/get-booking.output.ts:85-87 (data_classification)
apps/api/v2/src/platform/calendars/outputs/connected-calendars.output.ts:258-261 (data_classification)
apps/api/v2/src/platform/bookings/2024-04-15/inputs/create-booking.input.ts:67-71 (data_classification)
apps/api/v2/src/platform/bookings/2024-04-15/outputs/mark-no-show.output.ts:8-10 (data_classification)
apps/api/v2/src/platform/bookings/2024-04-15/outputs/get-booking.output.ts:39-41 (data_classification)
apps/api/v2/src/platform/bookings/2024-04-15/inputs/mark-no-show.input.ts:6-8 (data_classification)
apps/web/components/security/DisableTwoFactorModal.tsx:25-25 (data_classification)
apps/api/v2/src/modules/cal-unified-calendars/outputs/list-connections.output.ts:22-29 (data_classification)
apps/api/v2/src/modules/atoms/inputs/send-verification-email.input.ts:5-7 (data_classification)
apps/api/v2/src/modules/cal-unified-calendars/outputs/get-unified-calendar-event.output.ts:161-167 (data_classification)
packages/features/url-shortener/providers/SinkClient.ts:10-10 (data_classification)
apps/api/v2/src/modules/cal-unified-calendars/outputs/get-unified-calendar-event.output.ts:51-57 (data_classification)
packages/platform/types/bookings/2024-08-13/inputs/update-location.input.ts:41-44 (data_classification)
packages/features/calendars/components/DestinationCalendarSelector.tsx:39-39 (data_classification)
packages/emails/templates/slug-replacement-email.ts:9-9 (data_classification)
apps/api/v2/src/platform/me/outputs/me.output.ts:22-24 (data_classification)
packages/lib/builders/CalendarEvent/builder.ts:32-32 (data_classification)
apps/api/v2/src/modules/users/inputs/create-user.input.ts:26-34 (data_classification)
packages/sms/test/sms-manager.test.ts:12-12 (data_classification)
packages/platform/atoms/hooks/useVerifyEmail.ts:24-24 (data_classification)
apps/web/modules/auth/login-view.tsx:32-32 (data_classification)
apps/api/v2/src/modules/verified-resources/inputs/verify-phone.input.ts:6-13 (data_classification)
packages/platform/types/bookings/2024-08-13/inputs/location.input.ts:116-118 (data_classification)
apps/api/v2/src/modules/verified-resources/inputs/request-email-verification.input.ts:6-13 (data_classification)
packages/platform/types/bookings/2024-08-13/outputs/booking.output.ts:404-407 (data_classification)
packages/platform/types/bookings/2024-08-13/inputs/add-attendee.input.ts:6-12 (data_classification)
packages/features/users/services/userCreationService.ts:11-11 (data_classification)
packages/app-store/hitpay/api/webhook.ts:24-24 (data_classification)
apps/web/modules/users/components/UserForm.tsx:19-19 (data_classification)
apps/api/v2/src/modules/ooo/inputs/ooo.input.ts:119-127 (data_classification)
apps/api/v2/src/modules/cal-unified-calendars/inputs/create-unified-calendar-event.input.ts:32-37 (data_classification)
packages/emails/templates/disabled-app-email.ts:9-9 (data_classification)
apps/web/components/settings/SecondaryEmailConfirmModal.tsx:7-7 (data_classification)
packages/features/watchlist/lib/freeEmailDomainCheck/checkIfFreeEmailDomain.ts:7-7 (data_classification)
apps/api/v2/src/modules/atoms/inputs/check-email-verification-required-params.ts:5-7 (data_classification)
packages/platform/types/bookings/2024-08-13/inputs/create-booking.input.ts:143-152 (data_classification)
apps/api/v2/src/platform/calendars/outputs/connected-calendars.output.ts:86-88 (data_classification)
packages/features/auth/__mocks__/getServerSession.mocks.ts:23-23 (data_classification)
packages/platform/types/slots/slots-2024-04-15/inputs/index.ts:134-138 (data_classification)
apps/web/modules/users/views/users-edit-view.tsx:13-13 (data_classification)
apps/api/v2/src/modules/cal-unified-calendars/pipes/google-calendar-event-input-pipe.ts:19-19 (data_classification)
packages/platform/atoms/hooks/useVerifyCode.ts:16-16 (data_classification)
packages/platform/types/bookings/2024-08-13/outputs/booking.output.ts:27-30 (data_classification)
packages/platform/types/bookings/2024-08-13/inputs/add-guests.input.ts:21-27 (data_classification)
apps/api/v2/src/modules/cal-unified-calendars/outputs/get-unified-calendar-event.output.ts:228-232 (data_classification)
packages/platform/types/bookings/2024-08-13/outputs/booking.output.ts:98-101 (data_classification)
apps/api/v2/src/modules/cal-unified-calendars/outputs/get-unified-calendar-event.output.ts:200-204 (data_classification)
packages/features/watchlist/operations/check-if-email-in-watchlist.controller.ts:7-7 (data_classification)
apps/api/v2/src/modules/cal-unified-calendars/inputs/update-unified-calendar-event.input.ts:10-15 (data_classification)
apps/api/v2/src/modules/oauth-clients/controllers/oauth-client-users/outputs/managed-user.output.ts:11-13 (data_classification)
apps/api/v2/src/platform/bookings/2024-04-15/outputs/get-bookings.output.ts:34-36 (data_classification)
apps/api/v2/src/modules/verified-resources/inputs/verify-email.input.ts:6-13 (data_classification)
apps/api/v2/src/platform/bookings/2024-04-15/outputs/get-bookings.output.ts:160-162 (data_classification)
apps/api/v2/src/modules/verified-resources/outputs/verified-email.output.ts:51-58 (data_classification)
packages/features/auth/signup/utils/prefillAvatar.ts:9-9 (data_classification)
High SOC2_CC6_5 — Discontinuation of Protections Code Improvement Recommended
Satisfied: Data Classification, Data Lifecycle Management
Missing: Access Control, Encryption At Rest, Encryption In Transit, Key Management
apps/api/v2/src/modules/cal-unified-calendars/pipes/google-calendar-event-input-pipe.ts:19-19 (data_minimization_module_fanin)
packages/features/auth/lib/verifyEmail.ts:23-23 (data_classification)
apps/api/v2/src/modules/verified-resources/outputs/verified-email.output.ts:24-31 (data_classification)
apps/api/v2/src/modules/atoms/inputs/add-verified-email.input.ts:5-7 (data_classification)
apps/api/v2/src/modules/users/inputs/create-managed-user.input.ts:12-14 (data_classification)
packages/platform/types/calendars/inputs/create-calendar-credentials.input.ts:12-16 (data_classification)
apps/web/components/apps/exchangecalendar/Setup.tsx:22-22 (data_classification)
apps/api/v2/src/modules/users/outputs/get-users.output.ts:43-51 (data_classification)
apps/api/v2/src/platform/bookings/2024-04-15/outputs/get-booking.output.ts:67-69 (data_classification)
packages/platform/types/bookings/2024-08-13/inputs/create-booking.input.ts:143-152 (data_minimization_module_fanin)
packages/features/users/services/userCreationService.ts:11-11 (data_minimization_module_fanin)
apps/api/v2/src/modules/cal-unified-calendars/outputs/get-unified-calendar-event.output.ts:106-112 (data_classification)
apps/web/components/dialog/WrongAssignmentDialog.tsx:52-52 (data_classification)
packages/platform/types/bookings/2024-08-13/inputs/mark-absent.input.ts:6-8 (data_classification)
apps/api/v2/src/platform/calendars/outputs/connected-calendars.output.ts:161-164 (data_classification)
apps/api/v2/src/modules/cal-unified-calendars/outputs/get-unified-calendar-event.output.ts:244-248 (data_classification)
apps/api/v2/src/platform/bookings/2024-08-13/outputs/remove-attendee.output.ts:31-37 (data_classification)
apps/web/modules/users/components/UserForm.tsx:19-19 (data_minimization_module_fanin)
packages/features/watchlist/operations/check-if-email-in-watchlist.controller.ts:7-7 (data_minimization_module_fanin)
apps/api/v2/src/modules/atoms/inputs/verify-email-code.input.ts:5-7 (data_classification)
packages/emails/templates/slug-replacement-email.ts:9-9 (data_minimization_module_fanin)
packages/platform/types/event-types/event-types_2024_06_14/inputs/locations.input.ts:105-107 (data_classification)
apps/web/components/settings/DisableTwoFactorModal.tsx:29-29 (data_classification)
apps/api/v2/src/platform/calendars/outputs/connected-calendars.output.ts:118-121 (data_classification)
apps/api/v2/src/modules/verified-resources/inputs/request-phone-verification.input.ts:6-13 (data_classification)
packages/features/tasker/tasks/crm/__tests__/createCRMEvent.test.ts:12-12 (data_classification)
apps/api/v2/src/modules/users/inputs/update-managed-user.input.ts:11-14 (data_classification)
apps/web/components/dialog/WrongAssignmentDialog.tsx:52-52 (data_minimization_module_fanin)
apps/web/components/booking/BookingListItem.tsx:717-717 (data_classification)
apps/api/v2/src/platform/bookings/2024-04-15/outputs/get-booking.output.ts:85-87 (data_classification)
apps/api/v2/src/platform/calendars/outputs/connected-calendars.output.ts:258-261 (data_classification)
apps/api/v2/src/platform/bookings/2024-04-15/inputs/create-booking.input.ts:67-71 (data_classification)
apps/api/v2/src/platform/bookings/2024-04-15/outputs/mark-no-show.output.ts:8-10 (data_classification)
apps/api/v2/src/platform/bookings/2024-04-15/outputs/get-booking.output.ts:39-41 (data_classification)
apps/api/v2/src/platform/bookings/2024-04-15/inputs/mark-no-show.input.ts:6-8 (data_classification)
packages/features/watchlist/lib/freeEmailDomainCheck/checkIfFreeEmailDomain.ts:7-7 (data_minimization_module_fanin)
apps/web/components/security/DisableTwoFactorModal.tsx:25-25 (data_classification)
apps/api/v2/src/modules/cal-unified-calendars/outputs/list-connections.output.ts:22-29 (data_classification)
apps/api/v2/src/modules/atoms/inputs/send-verification-email.input.ts:5-7 (data_classification)
apps/api/v2/src/modules/cal-unified-calendars/outputs/get-unified-calendar-event.output.ts:161-167 (data_classification)
packages/features/url-shortener/providers/SinkClient.ts:10-10 (data_classification)
apps/api/v2/src/modules/cal-unified-calendars/outputs/get-unified-calendar-event.output.ts:51-57 (data_classification)
packages/platform/types/bookings/2024-08-13/inputs/update-location.input.ts:41-44 (data_classification)
packages/features/calendars/components/DestinationCalendarSelector.tsx:39-39 (data_classification)
packages/emails/templates/slug-replacement-email.ts:9-9 (data_classification)
apps/api/v2/src/platform/me/outputs/me.output.ts:22-24 (data_classification)
packages/lib/builders/CalendarEvent/builder.ts:32-32 (data_classification)
apps/api/v2/src/modules/users/inputs/create-user.input.ts:26-34 (data_classification)
packages/sms/test/sms-manager.test.ts:12-12 (data_classification)
packages/platform/atoms/hooks/useVerifyEmail.ts:24-24 (data_classification)
apps/web/modules/auth/login-view.tsx:32-32 (data_classification)
apps/api/v2/src/modules/verified-resources/inputs/verify-phone.input.ts:6-13 (data_classification)
packages/platform/types/bookings/2024-08-13/inputs/location.input.ts:116-118 (data_classification)
packages/platform/atoms/hooks/useVerifyEmail.ts:24-24 (data_minimization_module_fanin)
apps/api/v2/src/modules/verified-resources/inputs/request-email-verification.input.ts:6-13 (data_classification)
packages/platform/types/bookings/2024-08-13/outputs/booking.output.ts:27-30 (data_minimization_module_fanin)
apps/api/v2/src/modules/cal-unified-calendars/inputs/create-unified-calendar-event.input.ts:32-37 (data_minimization_module_fanin)
packages/platform/types/bookings/2024-08-13/outputs/booking.output.ts:404-407 (data_classification)
packages/platform/types/bookings/2024-08-13/inputs/location.input.ts:116-118 (data_minimization_module_fanin)
packages/platform/types/bookings/2024-08-13/inputs/add-attendee.input.ts:6-12 (data_classification)
packages/features/users/services/userCreationService.ts:11-11 (data_classification)
packages/app-store/hitpay/api/webhook.ts:24-24 (data_classification)
apps/web/modules/users/components/UserForm.tsx:19-19 (data_classification)
apps/api/v2/src/modules/ooo/inputs/ooo.input.ts:119-127 (data_classification)
apps/web/components/security/DisableTwoFactorModal.tsx:25-25 (data_minimization_module_fanin)
apps/api/v2/src/modules/cal-unified-calendars/inputs/create-unified-calendar-event.input.ts:32-37 (data_classification)
packages/platform/types/event-types/event-types_2024_06_14/inputs/locations.input.ts:105-107 (data_minimization_module_fanin)
packages/lib/builders/CalendarEvent/builder.ts:32-32 (data_minimization_module_fanin)
packages/emails/templates/disabled-app-email.ts:9-9 (data_classification)
packages/emails/templates/disabled-app-email.ts:9-9 (data_minimization_module_fanin)
packages/platform/atoms/hooks/useVerifyCode.ts:16-16 (data_minimization_module_fanin)
apps/web/components/settings/SecondaryEmailConfirmModal.tsx:7-7 (data_classification)
packages/features/watchlist/lib/freeEmailDomainCheck/checkIfFreeEmailDomain.ts:7-7 (data_classification)
apps/api/v2/src/modules/atoms/inputs/check-email-verification-required-params.ts:5-7 (data_classification)
packages/platform/types/bookings/2024-08-13/inputs/create-booking.input.ts:143-152 (data_classification)
apps/api/v2/src/platform/calendars/outputs/connected-calendars.output.ts:86-88 (data_classification)
apps/api/v2/src/modules/cal-unified-calendars/inputs/update-unified-calendar-event.input.ts:10-15 (data_minimization_module_fanin)
packages/features/auth/__mocks__/getServerSession.mocks.ts:23-23 (data_classification)
packages/platform/types/slots/slots-2024-04-15/inputs/index.ts:134-138 (data_classification)
apps/web/modules/users/views/users-edit-view.tsx:13-13 (data_classification)
apps/api/v2/src/modules/cal-unified-calendars/pipes/google-calendar-event-input-pipe.ts:19-19 (data_classification)
packages/platform/atoms/hooks/useVerifyCode.ts:16-16 (data_classification)
packages/platform/types/bookings/2024-08-13/outputs/booking.output.ts:27-30 (data_classification)
packages/platform/types/bookings/2024-08-13/inputs/add-guests.input.ts:21-27 (data_classification)
apps/api/v2/src/modules/cal-unified-calendars/outputs/get-unified-calendar-event.output.ts:228-232 (data_classification)
packages/platform/types/bookings/2024-08-13/outputs/booking.output.ts:98-101 (data_classification)
apps/api/v2/src/modules/cal-unified-calendars/outputs/get-unified-calendar-event.output.ts:200-204 (data_classification)
apps/api/v2/src/modules/cal-unified-calendars/outputs/get-unified-calendar-event.output.ts:51-57 (data_minimization_module_fanin)
packages/features/watchlist/operations/check-if-email-in-watchlist.controller.ts:7-7 (data_classification)
apps/api/v2/src/modules/cal-unified-calendars/inputs/update-unified-calendar-event.input.ts:10-15 (data_classification)
apps/api/v2/src/modules/oauth-clients/controllers/oauth-client-users/outputs/managed-user.output.ts:11-13 (data_classification)
apps/api/v2/src/platform/bookings/2024-04-15/outputs/get-bookings.output.ts:34-36 (data_classification)
apps/api/v2/src/modules/verified-resources/inputs/verify-email.input.ts:6-13 (data_classification)
apps/api/v2/src/platform/bookings/2024-04-15/outputs/get-bookings.output.ts:160-162 (data_classification)
apps/api/v2/src/modules/verified-resources/outputs/verified-email.output.ts:51-58 (data_classification)
packages/features/auth/signup/utils/prefillAvatar.ts:9-9 (data_classification)
High HIPAA_310_D_001 — Disposal Code Improvement Recommended
Satisfied: Data Lifecycle Management
apps/api/v2/src/modules/cal-unified-calendars/pipes/google-calendar-event-input-pipe.ts:19-19 (data_minimization_module_fanin)
packages/platform/types/bookings/2024-08-13/inputs/create-booking.input.ts:143-152 (data_minimization_module_fanin)
packages/features/users/services/userCreationService.ts:11-11 (data_minimization_module_fanin)
apps/web/modules/users/components/UserForm.tsx:19-19 (data_minimization_module_fanin)
packages/features/watchlist/operations/check-if-email-in-watchlist.controller.ts:7-7 (data_minimization_module_fanin)
packages/emails/templates/slug-replacement-email.ts:9-9 (data_minimization_module_fanin)
apps/web/components/dialog/WrongAssignmentDialog.tsx:52-52 (data_minimization_module_fanin)
packages/features/watchlist/lib/freeEmailDomainCheck/checkIfFreeEmailDomain.ts:7-7 (data_minimization_module_fanin)
packages/platform/atoms/hooks/useVerifyEmail.ts:24-24 (data_minimization_module_fanin)
packages/platform/types/bookings/2024-08-13/outputs/booking.output.ts:27-30 (data_minimization_module_fanin)
apps/api/v2/src/modules/cal-unified-calendars/inputs/create-unified-calendar-event.input.ts:32-37 (data_minimization_module_fanin)
packages/platform/types/bookings/2024-08-13/inputs/location.input.ts:116-118 (data_minimization_module_fanin)
apps/web/components/security/DisableTwoFactorModal.tsx:25-25 (data_minimization_module_fanin)
packages/platform/types/event-types/event-types_2024_06_14/inputs/locations.input.ts:105-107 (data_minimization_module_fanin)
packages/lib/builders/CalendarEvent/builder.ts:32-32 (data_minimization_module_fanin)
packages/emails/templates/disabled-app-email.ts:9-9 (data_minimization_module_fanin)
packages/platform/atoms/hooks/useVerifyCode.ts:16-16 (data_minimization_module_fanin)
apps/api/v2/src/modules/cal-unified-calendars/inputs/update-unified-calendar-event.input.ts:10-15 (data_minimization_module_fanin)
apps/api/v2/src/modules/cal-unified-calendars/outputs/get-unified-calendar-event.output.ts:51-57 (data_minimization_module_fanin)
High HIPAA_310_D_002 — Media Re-use Code Improvement Recommended
Satisfied: Data Lifecycle Management
apps/api/v2/src/modules/cal-unified-calendars/pipes/google-calendar-event-input-pipe.ts:19-19 (data_minimization_module_fanin)
packages/platform/types/bookings/2024-08-13/inputs/create-booking.input.ts:143-152 (data_minimization_module_fanin)
packages/features/users/services/userCreationService.ts:11-11 (data_minimization_module_fanin)
apps/web/modules/users/components/UserForm.tsx:19-19 (data_minimization_module_fanin)
packages/features/watchlist/operations/check-if-email-in-watchlist.controller.ts:7-7 (data_minimization_module_fanin)
packages/emails/templates/slug-replacement-email.ts:9-9 (data_minimization_module_fanin)
apps/web/components/dialog/WrongAssignmentDialog.tsx:52-52 (data_minimization_module_fanin)
packages/features/watchlist/lib/freeEmailDomainCheck/checkIfFreeEmailDomain.ts:7-7 (data_minimization_module_fanin)
packages/platform/atoms/hooks/useVerifyEmail.ts:24-24 (data_minimization_module_fanin)
packages/platform/types/bookings/2024-08-13/outputs/booking.output.ts:27-30 (data_minimization_module_fanin)
apps/api/v2/src/modules/cal-unified-calendars/inputs/create-unified-calendar-event.input.ts:32-37 (data_minimization_module_fanin)
packages/platform/types/bookings/2024-08-13/inputs/location.input.ts:116-118 (data_minimization_module_fanin)
apps/web/components/security/DisableTwoFactorModal.tsx:25-25 (data_minimization_module_fanin)
packages/platform/types/event-types/event-types_2024_06_14/inputs/locations.input.ts:105-107 (data_minimization_module_fanin)
packages/lib/builders/CalendarEvent/builder.ts:32-32 (data_minimization_module_fanin)
packages/emails/templates/disabled-app-email.ts:9-9 (data_minimization_module_fanin)
packages/platform/atoms/hooks/useVerifyCode.ts:16-16 (data_minimization_module_fanin)
apps/api/v2/src/modules/cal-unified-calendars/inputs/update-unified-calendar-event.input.ts:10-15 (data_minimization_module_fanin)
apps/api/v2/src/modules/cal-unified-calendars/outputs/get-unified-calendar-event.output.ts:51-57 (data_minimization_module_fanin)
High SOC2_C1_2 — Disposal of Confidential Information Code Improvement Recommended
Satisfied: Data Lifecycle Management
apps/api/v2/src/modules/cal-unified-calendars/pipes/google-calendar-event-input-pipe.ts:19-19 (data_minimization_module_fanin)
packages/platform/types/bookings/2024-08-13/inputs/create-booking.input.ts:143-152 (data_minimization_module_fanin)
packages/features/users/services/userCreationService.ts:11-11 (data_minimization_module_fanin)
apps/web/modules/users/components/UserForm.tsx:19-19 (data_minimization_module_fanin)
packages/features/watchlist/operations/check-if-email-in-watchlist.controller.ts:7-7 (data_minimization_module_fanin)
packages/emails/templates/slug-replacement-email.ts:9-9 (data_minimization_module_fanin)
apps/web/components/dialog/WrongAssignmentDialog.tsx:52-52 (data_minimization_module_fanin)
packages/features/watchlist/lib/freeEmailDomainCheck/checkIfFreeEmailDomain.ts:7-7 (data_minimization_module_fanin)
packages/platform/atoms/hooks/useVerifyEmail.ts:24-24 (data_minimization_module_fanin)
packages/platform/types/bookings/2024-08-13/outputs/booking.output.ts:27-30 (data_minimization_module_fanin)
apps/api/v2/src/modules/cal-unified-calendars/inputs/create-unified-calendar-event.input.ts:32-37 (data_minimization_module_fanin)
packages/platform/types/bookings/2024-08-13/inputs/location.input.ts:116-118 (data_minimization_module_fanin)
apps/web/components/security/DisableTwoFactorModal.tsx:25-25 (data_minimization_module_fanin)
packages/platform/types/event-types/event-types_2024_06_14/inputs/locations.input.ts:105-107 (data_minimization_module_fanin)
packages/lib/builders/CalendarEvent/builder.ts:32-32 (data_minimization_module_fanin)
packages/emails/templates/disabled-app-email.ts:9-9 (data_minimization_module_fanin)
packages/platform/atoms/hooks/useVerifyCode.ts:16-16 (data_minimization_module_fanin)
apps/api/v2/src/modules/cal-unified-calendars/inputs/update-unified-calendar-event.input.ts:10-15 (data_minimization_module_fanin)
apps/api/v2/src/modules/cal-unified-calendars/outputs/get-unified-calendar-event.output.ts:51-57 (data_minimization_module_fanin)
High SOC2_P4_2 — Retention of Personal Information Code Improvement Recommended
Satisfied: Data Lifecycle Management
Missing: Data Retention
apps/api/v2/src/modules/cal-unified-calendars/pipes/google-calendar-event-input-pipe.ts:19-19 (data_minimization_module_fanin)
packages/platform/types/bookings/2024-08-13/inputs/create-booking.input.ts:143-152 (data_minimization_module_fanin)
packages/features/users/services/userCreationService.ts:11-11 (data_minimization_module_fanin)
apps/web/modules/users/components/UserForm.tsx:19-19 (data_minimization_module_fanin)
packages/features/watchlist/operations/check-if-email-in-watchlist.controller.ts:7-7 (data_minimization_module_fanin)
packages/emails/templates/slug-replacement-email.ts:9-9 (data_minimization_module_fanin)
apps/web/components/dialog/WrongAssignmentDialog.tsx:52-52 (data_minimization_module_fanin)
packages/features/watchlist/lib/freeEmailDomainCheck/checkIfFreeEmailDomain.ts:7-7 (data_minimization_module_fanin)
packages/platform/atoms/hooks/useVerifyEmail.ts:24-24 (data_minimization_module_fanin)
packages/platform/types/bookings/2024-08-13/outputs/booking.output.ts:27-30 (data_minimization_module_fanin)
apps/api/v2/src/modules/cal-unified-calendars/inputs/create-unified-calendar-event.input.ts:32-37 (data_minimization_module_fanin)
packages/platform/types/bookings/2024-08-13/inputs/location.input.ts:116-118 (data_minimization_module_fanin)
apps/web/components/security/DisableTwoFactorModal.tsx:25-25 (data_minimization_module_fanin)
packages/platform/types/event-types/event-types_2024_06_14/inputs/locations.input.ts:105-107 (data_minimization_module_fanin)
packages/lib/builders/CalendarEvent/builder.ts:32-32 (data_minimization_module_fanin)
packages/emails/templates/disabled-app-email.ts:9-9 (data_minimization_module_fanin)
packages/platform/atoms/hooks/useVerifyCode.ts:16-16 (data_minimization_module_fanin)
apps/api/v2/src/modules/cal-unified-calendars/inputs/update-unified-calendar-event.input.ts:10-15 (data_minimization_module_fanin)
apps/api/v2/src/modules/cal-unified-calendars/outputs/get-unified-calendar-event.output.ts:51-57 (data_minimization_module_fanin)
High SOC2_P4_3 — Disposal of Personal Information Code Improvement Recommended
Satisfied: Data Lifecycle Management
apps/api/v2/src/modules/cal-unified-calendars/pipes/google-calendar-event-input-pipe.ts:19-19 (data_minimization_module_fanin)
packages/platform/types/bookings/2024-08-13/inputs/create-booking.input.ts:143-152 (data_minimization_module_fanin)
packages/features/users/services/userCreationService.ts:11-11 (data_minimization_module_fanin)
apps/web/modules/users/components/UserForm.tsx:19-19 (data_minimization_module_fanin)
packages/features/watchlist/operations/check-if-email-in-watchlist.controller.ts:7-7 (data_minimization_module_fanin)
packages/emails/templates/slug-replacement-email.ts:9-9 (data_minimization_module_fanin)
apps/web/components/dialog/WrongAssignmentDialog.tsx:52-52 (data_minimization_module_fanin)
packages/features/watchlist/lib/freeEmailDomainCheck/checkIfFreeEmailDomain.ts:7-7 (data_minimization_module_fanin)
packages/platform/atoms/hooks/useVerifyEmail.ts:24-24 (data_minimization_module_fanin)
packages/platform/types/bookings/2024-08-13/outputs/booking.output.ts:27-30 (data_minimization_module_fanin)
apps/api/v2/src/modules/cal-unified-calendars/inputs/create-unified-calendar-event.input.ts:32-37 (data_minimization_module_fanin)
packages/platform/types/bookings/2024-08-13/inputs/location.input.ts:116-118 (data_minimization_module_fanin)
apps/web/components/security/DisableTwoFactorModal.tsx:25-25 (data_minimization_module_fanin)
packages/platform/types/event-types/event-types_2024_06_14/inputs/locations.input.ts:105-107 (data_minimization_module_fanin)
packages/lib/builders/CalendarEvent/builder.ts:32-32 (data_minimization_module_fanin)
packages/emails/templates/disabled-app-email.ts:9-9 (data_minimization_module_fanin)
packages/platform/atoms/hooks/useVerifyCode.ts:16-16 (data_minimization_module_fanin)
apps/api/v2/src/modules/cal-unified-calendars/inputs/update-unified-calendar-event.input.ts:10-15 (data_minimization_module_fanin)
apps/api/v2/src/modules/cal-unified-calendars/outputs/get-unified-calendar-event.output.ts:51-57 (data_minimization_module_fanin)
High GDPR_ART_12_005 — Free of Charge Information and Requests Code Improvement Recommended
Missing: Consent Management
High GDPR_ART_17_002 — Obligation to Inform Other Controllers of Erasure Request Code Improvement Recommended
Missing: Consent Management
High GDPR_ART_18_002 — Processing of Restricted Data Code Improvement Recommended
Missing: Consent Management
High GDPR_ART_19_001 — Notification Obligation Regarding Rectification, Erasure, or Restriction Code Improvement Recommended
Missing: Consent Management
High GDPR_ART_20_003 — Data Portability - Limitations Code Improvement Recommended
Missing: Consent Management
High GDPR_ART_23_001 — Restrictions of Rights and Obligations Code Improvement Recommended
Missing: Consent Management
High GDPR_ART_27_001 — Representative of Controllers or Processors Not Established in the Union Code Improvement Recommended
Missing: Access Control
High GDPR_ART_27_002 — Representative - Mandate and Responsibilities Code Improvement Recommended
Missing: Access Control
High GDPR_ART_28_002 — Processor - Engagement of Sub-Processors Code Improvement Recommended
Missing: Access Control
High GDPR_ART_34_002 — Exceptions to Breach Communication to Data Subject Code Improvement Recommended
Missing: Audit Logging
High GDPR_ART_35_003 — DPIA - Content Code Improvement Recommended
Missing: Consent Management
High GDPR_ART_58_001 — Supervisory Authority - Investigative Powers Code Improvement Recommended
Missing: Audit Logging
High GDPR_ART_6_002 — Lawful Processing - Contract Code Improvement Recommended
Missing: Consent Management
High GDPR_ART_7_004 — Consent - Freely Given Assessment Code Improvement Recommended
Missing: Consent Management
High HIPAA_308_A1_004 — Information System Activity Review Code Improvement Recommended
Missing: Audit Logging
High HIPAA_308_B_001 — Business Associate Contracts and Other Arrangements Code Improvement Recommended
Missing: Access Control
High HIPAA_310_C_001 — Workstation Security Code Improvement Recommended
Missing: Access Control
High HIPAA_312_B_001 — Audit Controls Code Improvement Recommended
Missing: Audit Logging
High HIPAA_314_A_001 — Business Associate Contracts Code Improvement Recommended
Missing: Access Control
High SOC2_A1_3 — Recovery Plan Testing Code Improvement Recommended
Missing: Audit Logging
High SOC2_CC4_1 — Ongoing and Separate Evaluations Code Improvement Recommended
Missing: Audit Logging
High SOC2_CC4_2 — Evaluation and Communication of Deficiencies Code Improvement Recommended
Missing: Audit Logging
High SOC2_CC7_1 — Detection and Monitoring of Vulnerabilities Code Improvement Recommended
Missing: Audit Logging
High SOC2_CC7_2 — Anomaly Monitoring and Analysis Code Improvement Recommended
Missing: Audit Logging
High SOC2_CC7_5 — Recovery from Security Incidents Code Improvement Recommended
Missing: Audit Logging
High SOC2_CC8_1 — Change Management Code Improvement Recommended
Missing: Audit Logging
High SOC2_CC9_2 — Vendor and Business Partner Risk Management Code Improvement Recommended
Missing: Access Control
High SOC2_P1_1 — Privacy Notice to Data Subjects Code Improvement Recommended
Missing: Consent Management
High SOC2_P1_2 — Privacy Notice Maintenance Code Improvement Recommended
Missing: Consent Management

Control Mapping Appendix

Raw control-level mapping (control IDs, clause text) is intentionally not inlined here — export to JSON or SARIF for the complete, machine-readable control mapping.