About DROPAttest
DROPAttest is a single-purpose tool for California-registered data brokers: it matches a DROP list against your records in your browser, seals every determination under an append-only hash chain, and hands you evidence a third party can re-check.
California's DROP asks a small data broker to standardize and hash its records exactly the way the mechanism does, compare them against every deletion request in the 45-day cycle, file a response code for each one, and keep records that a third party will audit from 2028. DROPAttest does the matching, the record-keeping and the proof. The deletions stay yours.
One rule shapes the whole design: raw PII and real record IDs never leave your device. Standardization, hashing and matching run client-side. What crosses the network is the match itself, and what the server and the audit chain store is a salted record token — never the record.
What it does
- Matches all six DROP list types — Email, Phone, MAID, NDZ, NameVIN and CTVID, composites included — in your browser, with an engine checked byte-for-byte against DROP's published golden vectors.
- Binds each determination — Delete, Exempt, Opted-out, Not found — to an append-only hash chain, and keeps “could not evaluate” as its own outcome rather than folding it into “not found”.
- Timestamps the chain head with an external RFC 3161 witness and packages the cycle as evidence a third party can re-check with standard tools.
What it does not do
- Execute deletions — you run them in your own systems.
- Verify that a deletion happened — deletions are broker-attested, and the evidence package records them as exactly that.
- See, store or transmit raw PII or real record IDs.
Built by Ravi, founder. Questions go to ravi@trydropattest.com.