DOCSEARCHbyAlgolia
Submit Docs

Soyio Documentation

website·Indexed 32 days ago

https://docs.soyio.id

A personal data protection platform providing tools for consent management, cookie compliance, and privacy workflows. Includes guides for API integration, Google Tag Manager and HubSpot setup, consent form customization, and the Soyio MCP server for AI agent connectivity.

Tokens
198.3K
Snippets
690
Records
1.4K
Agent score
58%

What's inside Soyio

  1. Overview of Soyio Workflows

    Workflows in Soyio are visual flows composed of connected blocks used to automate repetitive operational and compliance processes. They allow users to standardize decisions, react to events (webhooks, schedules), and maintain traceability of every execution. A workflow consists of a trigger to start the flow, routing blocks for logic, and action blocks for tasks such as sending emails, calling external APIs, requesting internal approvals, or updating request statuses.

    Note: This functionality is available as an add-on for certain plans. Contact soporte@soyio.id for availability.

  2. Overview of Soyio Authentication capabilities

    The Soyio authentication module provides secure user authentication using Passkeys (device-stored secure keys) and 3D facial biometric verification. It is designed to protect critical operations, reduce fraud, and centralize authentication across a platform. Key security features include end-to-end encryption, secure tokens with a 5-minute expiration, brute-force protection via attempt limiting, and digitally signed webhooks for event notifications.

  4. Overview of Soyio REDEC Module for NCG 540 Compliance

    The REDEC module by Soyio enables Chilean financial institutions to comply with the Comisión para el Mercado Financiero (CMF) General Character Norm N°540 (NCG 540), effective April 1, 2026. This regulation requires an auditable record of all user consents and updates granted for risk assessment and access to financial products.

    Key capabilities of the module include:

    • Consent Registration: Automatic recording of REDEC consent actions linked to user RUTs.
    • Evidence Capture: Support for verbal consents via audio recordings with SHA256 integrity verification.
    • Automated Documentation: Generation of PDF receipts with SHA256 verification and delivery notifications via webhooks.
    • Batch Processing: Ability to register multiple actions in a single operation using consent commits.
    • Rights Requests: Handling of REDEC Data Subject Requests (DSR) from the Privacy Center, including the operationId defined by RDC01.
    • Regulatory Reporting: Automated generation and synchronization of CMF-mandated reports: RDC30 (weekly), RDC31 (weekly), and RDC40 (daily).

  5. Overview of Third-Party Consent in Soyio

    The Third-Party Consent module allows businesses to register consents captured by an external entity (a 'third party') acting on their behalf. Instead of direct user interaction, the business declares the provenance of the consent, linking it to the specific third party that captured it. This creates an immutable record of origin visible in the user's compliance status. The guarantee of validity is contractual, based on the agreement between the business and the third party.

  6. Overview of Soyio Data Taxonomies

    Soyio uses a standardized taxonomy system inspired by Fides to organize and label processed data. This system allows developers to describe any data processing activity by combining three pillars: Data Categories (the 'What'), Data Subjects (the 'Who'), and Data Uses (the 'Why'). This structure is essential for regulatory compliance and managing user consent.

  7. Overview of RDC40 Reports for REDEC

    RDC40 reports consolidate REDEC Data Subject Request (DSR) events over a specific period, formatted for CMF (Chile) compliance. Entries are generated in the report when the following events occur:

    • Creation of a request
    • Start of request processing
    • Resolution of the request (Approved, Partially Approved, Rejected, or Validation Failure)

    If no events occur during the period, Soyio registers an internal event redec.rdc40_no_changes, indicating 'no changes' to the CMF.

  8. Overview of Soyio Cookie Management

    The Soyio Cookies module manages user consent by displaying a preference banner, recording visitor decisions, and preventing optional scripts from executing until consent is granted. It integrates with Google Consent Mode v2 using 'Basic' mode, meaning analytics and advertising signals are kept as denied until the visitor accepts the corresponding category. Key features include a managed banner/preference panel, direct integration with gtag or Google Tag Manager (GTM), explicit script blocking by category, and preference synchronization for identified users.

  9. Overview of the Soyio identity verification flow

    The identity verification process follows a specific sequence to ensure secure data disclosure:

    1. The Backend creates a disclosure request via the Soyio API.
    2. The Backend sends the disclosure_request_id to the Frontend.
    3. The Frontend initializes the Soyio Widget using that ID.
    4. The user completes the verification flow in the widget.
    5. Soyio sends a disclosure_request.granted webhook to the Backend.
    6. The Backend requests and receives the verified identity data from the Soyio API.

  10. Overview of Soyio Rights Management

    The Soyio Rights Management module provides a comprehensive platform for users to exercise their data protection rights transparently. It enables organizations to centralize the management of these requests and generate auditable evidence of the company's responses to ensure compliance with data protection regulations.

  11. Overview of Soyio services for end-users

    Soyio is a platform that allows users to manage their personal data and digital identity when interacting with companies. Its core services include:

    Data Protection:

    • Consent Management: Control which data is shared and for what purpose.
    • Rights Management: Exercise rights of access, rectification, and deletion.
    • Privacy Center: A portal to review and manage privacy preferences.

    Digital Identity:

    • Identity Verification: Validate identity using official documents and biometrics.
    • Authentication: Secure access via passkeys or facial recognition.

  12. Overview of Soyio Integration Modules

    Soyio provides five independent modules that can be integrated via API, SDK, or widgets. These modules can be used separately or combined to create custom identity and privacy flows:

    • Consent Management: Auditable capture and updates of user consents across digital channels.
    • Rights Management: Administration of data protection rights requests (access, rectification, deletion, etc.).
    • Privacy Center: A self-service portal for users to manage their own consents and rights requests.
    • Identity Verification: Validation of document authenticity, validity, and user presence via biometrics.
    • Authentication: Confirmation of previously verified identities using biometrics or passkeys for critical operations.