US Data Privacy (USDP) – Core Multi-State Bundle --- US Data Privacy (Core Multi-State Bundle)
Internal Aurora bundle of common requirements across major US state consumer privacy laws (VCDPA, Colorado CPA, CTDPA, and UCPA).
Framework mapping summary
Catalog entry
Type: Framework
Publisher: Aurora Command (internal bundle) --- Aurora (internal)
Versions: 1
Jurisdictions: us
Coverage (representative version)
Requirements
14
Mapped controls
30
Evidence specs
87
Automation tests
1
Notes
Consolidated common obligations across multiple US comprehensive state privacy laws (initially Virginia VCDPA, Colorado CPA, Connecticut CTDPA, and Utah UCPA). This bundle reduces duplication by mapping shared obligations to Aurora controls; state-specific edge cases remain in the individual state mappings.
Supported versions and coverage stats
2025-12-27
Requirements
14
Mapped controls
30
Evidence specs
87
Automation tests
1
Framework mapping is only useful when it produces proof.
Scope and control mapping
- Map requirements to Aurora controls
- Assign owners and approval gates
- Keep decisions tied to exports
Evidence and freshness
- Attach artifacts to controls and answers
- Track capture dates and expiration
- Export binder-ready folders with provenance
Reviewer-ready exports
- Generate proof packs and binder exports
- Produce point-in-time snapshots for assessment windows
- Keep citations attached so reviewers can verify
Controlled sharing
- Share curated artifacts through a Trust Center
- Gate access with tier rules and agreements
- Export access logs for audit trails
See how this maps to your next reviewer request
Use exports to align on scope
Start with the deliverable reviewers accept, then map backward to the controls and evidence you need.
Bring one request, get a plan
We will map the shortest path: required controls, evidence objects, integrations, and the export format reviewers expect.
FAQ
Does this mean Aurora certifies us?
Does this mean Aurora certifies us?
No. Aurora helps you map requirements to controls and export proof. Certification decisions remain with your auditors and certification bodies.
Can we run multiple frameworks in one system?
Can we run multiple frameworks in one system?
Yes. Aurora is designed for reusable control mapping and evidence so you can expand without redoing work.
Can we start without integrations?
Can we start without integrations?
Yes. Manual uploads and mapping work on day one, and you can add connectors on your schedule.
Want a proof pack for your framework?
View the export formats first, then we will map the shortest path to reviewer-ready proof.
Have a deadline? Tell us. We can prioritize export-ready proof.