California enforcement begins August 1, 2026 — DROP deletion processing is now mandatory
California Delete Act · DROP

DROP deletion compliance, fully handled.

Every 45 days, registered data brokers must pull California's consumer deletion list, match it against their records, act on every match, and report the status back to the state. DropDesk runs that entire cycle for you, automatically.

Request early access
Early access · $149/month
No engineering needed Audit log included You stay in control
AD
Acme Data Co.DROP compliance
Compliant
Current 45-day cycleDay 22 of 45
Deletion list pulled 12,480
Matched in your data 318
Deleted & opted out 318 ✓
Status report filed On time ✓
Next run in 23 days6 cycles in audit log
Built on the official DROP API SHA-256 hashed matching Audit-ready records

The obligation

DROP is not a one-time filing. It is a 45-day loop.

The state's Delete Request and Opt-out Platform turns deletion into a recurring operational task, with real penalties for falling behind.

Every 45 days you must pull the latest deletion list from DROP, hash and match it against your data, delete or opt out each match, and report the status of every request back to the state. Miss a cycle and you are exposed to enforcement and per-request penalties.

How it works

Authorize once. We run the loop and hand you the proof.

01

Pull

We retrieve the latest hashed deletion lists from DROP through the official API on every cycle, automatically.

02

Match

We hash your records the same way (SHA-256) and find every match, flagging each as deleted, opted out, exempt, or not found.

03

Report

We submit the status file back to DROP and keep a timestamped audit log you can show the regulator on request.

Why DropDesk

Compliance handled, without the privacy department.

Purpose-built for DROP

Built around the official Delete Act deletion workflow, not a bolt-on inside a generic privacy suite.

You stay in control

You authorize access at your discretion. Matching runs on hashes, your data stays yours.

Audit log as proof

Every cycle is recorded with timestamps, so compliance is documented, not just done.

No team required

No engineering, no consultants. Made for small and mid-size brokers without a privacy department.

Get covered before August 1.

We are onboarding a first group of data brokers for early access. Tell us about your setup and we will have you ready for your first cycle.

Request early access