ComplianceDashboard

Compliance Dashboard

Administrator-only. Technical status only — does not imply legal or Matterport approval.

MATTERPORT_COMMERCIAL_AUTHORIZATION
CONTACT_REQUIRED
REQUIRES_EXTERNAL_CONFIRMATION

This is an external contractual status with Matterport. It cannot be satisfied through code and remains REQUIRES_EXTERNAL_CONFIRMATION until written authorization is manually recorded by an administrator. Do not interpret any technical change as Matterport approval.

Features whose commercial use may require written Matterport authorization:

Paid Xperio3D subscriptions
Customer access behind authentication or paywalls
Affiliate shopping or booking commissions
White-label experiences
Private Matterport models
Mobile WebView applications
Centrally managed Matterport SDK keys
Removal or modification of Matterport branding
Compliance checks

Matterport branding overlap test

LOGO_COVER_H obstruction removed; Xperio3D/creator branding repositioned outside the Matterport iframe overlay area. Responsive collision-safe across desktop, tablet, mobile.

VERIFIED

Complete account deletion

Multi-step deletion workflow with export, Stripe cancellation, entity-scoped deletion, compliance receipt. Final auth-account removal pending Base44 support.

View
IMPLEMENTED_NOT_LEGALLY_REVIEWED

Stripe webhook verification

Stripe signature verification enabled; base44_app_id metadata included in checkout sessions.

VERIFIED

Analytics abuse protection

Public ingestion moved behind ingestAnalytics function with allowlisted schema, throttle, dedup, bot filter, admin-field rejection, audit logging.

IMPLEMENTED_NOT_LEGALLY_REVIEWED

Audit-log health

AuditLog entity created; sensitive values scrubbed; admin-only read.

IMPLEMENTED_NOT_LEGALLY_REVIEWED

AI disclaimer

Persistent AI Concierge notice present; high-impact topics flagged; tenant isolation enforced server-side.

View
IMPLEMENTED_NOT_LEGALLY_REVIEWED

DPA availability

DPA page published; requires legal counsel review.

View
IMPLEMENTED_NOT_LEGALLY_REVIEWED

Privacy subprocessors documented

Matterport, Stripe, ElevenLabs, analytics, email, hosting documented in Privacy Policy and DPA.

IMPLEMENTED_NOT_LEGALLY_REVIEWED

Backup & disaster-recovery documentation

Platform backups managed by Base44 hosting. DR documentation requires platform confirmation.

REQUIRES_EXTERNAL_CONFIRMATION
SDK key governance

No MatterportKeyConfig records. Register your SDK application keys (metadata only — never store the full key).

Legal pages
Privacy Policy
IMPLEMENTED_NOT_LEGALLY_REVIEWED
Cookie Policy
IMPLEMENTED_NOT_LEGALLY_REVIEWED
Terms of Service
IMPLEMENTED_NOT_LEGALLY_REVIEWED
Data Processing Agreement
IMPLEMENTED_NOT_LEGALLY_REVIEWED
Acceptable Use Policy
IMPLEMENTED_NOT_LEGALLY_REVIEWED
AI Usage Policy
IMPLEMENTED_NOT_LEGALLY_REVIEWED
Refund Policy
IMPLEMENTED_NOT_LEGALLY_REVIEWED
Cancellation Policy
IMPLEMENTED_NOT_LEGALLY_REVIEWED
Data Deletion
IMPLEMENTED_NOT_LEGALLY_REVIEWED

Classification legend: VERIFIED · IMPLEMENTED_NOT_LEGALLY_REVIEWED · REQUIRES_EXTERNAL_CONFIRMATION · PARTIAL · FAILED · NOT_APPLICABLE. This dashboard does not compute a single compliance percentage from page existence alone.