The General Data Protection Regulation (GDPR) is intended to protect the fundamental privacy rights of EU data subjects and the security of personal data.

Tuya has officially completed its CCPA compliance audit. Tuya Cloud Platform exhibits a high level of program maturity with regard to privacy and data protection.

ISO/IEC 27701 is an international management system standard, it provides guidance on the protection of privacy, including how organizations should manage personal information, and assists in demonstrating compliance with privacy regulations around the world.

ISO 27001 is the internationally recognized specification for an information security management system (ISMS). Its best-practice approach helps organizations manage the security of their information assets.

ISO 27017 provides specific guidance on the information security aspects of cloud computing, recommending the implementation of cloud-specific information security controls. ISO 27017 also includes guidance on information security controls for cloud service providers.

STAR certification incorporates the requirements of ISO 27001, and a maturity rating to indicate how well an organization is complying with the additional cloud specific requirements and also to drive optimization efforts by assessing the organizations capabilities and complexities as well.

SOC 2 is an auditing procedure specifically designed for service providers storing customer data in the cloud to ensure that their information security measures comply with security standards.

Rapid7 is the world's leading provider of security risk information solutions. Rapid7 is used for vulnerability management, vulnerability scanning, vulnerability assessment and penetration testing.

Wizlynx Group provides Internet of Things (IoT) security assessments for Tuya Smart's indoor security cameras, as well as traffic analysis, code audits and security assessments for the device's mobile applications and associated SDKs.

Science Soft is a US-based IT consulting and software development company founded in 1989, technically expertised in cybersecurity services. More than 150 implemented projects in security consulting. They also provide certified ethical hackers equipped with a wide set of skills in the area.

UnderDefense is a USA based cybersecurity company and has its professional security testing and consulting service in the area.

Being certified by EPC demonstrates that Tuya has fully implemented its privacy policy and privacy controls.

E&Y(Ernst & Young Global Limited) provided SOC2 Audit effort with Tuya to validate and assess the principles of security, availability, confidentiality and privacy through the comprehensive SOC2 TypeII report.

Conformity of Europe (CE) is a mandatory conformity mark for products placed on the market in the European Economic Area (EEA).

FCC certification is a type of product certification for electrical products with radiofrequency that are manufactured or sold in the United States.

Industry Canada (IC) is a Canadian federal government department and responsible for the certification of radio-communication equipment entering the Canadian market

The State Radio Regulation of China (SRRC) is a compulsory certification that is required by the State Radio Regulatory Commission of the People's Republic of China.

REACH is the European chemicals legislation and stands for Registration, Evaluation, Authorization and Restriction of Chemicals.

Restriction of Hazardous Substances (RoHS) restricts the use of specific hazardous materials found in electrical and electronic products. RoHS is a mandatory standard enacted by EU legislation.