Compliance automation and data engineering, built to be audited.
We build software that takes recurring regulatory and data chores off small and mid-size companies, and we take on fixed-scope engineering work for teams that need it done carefully. Our products run California's data-broker deletion cycle and FCC robocall-database compliance end to end.
DROP runner
Every data broker registered in California must pull the state's DROP deletion list at least every 45 days, match its hashed identifiers, delete what matches, direct their service providers, and report back. Missing a request costs $200 per request per day. DROP runner does the whole cycle and keeps the records that prove it.
Where it works. The California cycle every 45 days, plus the state data-broker registries you tick, on one calendar with the official place to file on every row:
- California: by 31 January each year, with the prior year's deletion-request metrics, $6,000 for 2026, at the California Privacy Protection Agency
- Connecticut: by 31 December each year, as registrations run to the end of the calendar year, $2,500, at the Connecticut Department of Consumer Protection
- Oregon: by 1 December each year, at least 30 days before the 31 December expiry, $600, not pro-rated, at the Oregon Division of Financial Regulation
- Texas: every year on the anniversary of your registration, within the 90 days before it expires, $300, at the Texas Secretary of State
- Vermont: by 31 January each year, moving to 1 July from 2027 under Act 138, $100, rising to $900 from 2027, at the Vermont Secretary of State
What you see
The 45-day clock, the next state renewals and every finished cycle, on one page.
One DROP cycle, start to finish
The top row is your part, the middle row runs on its own, and the bottom row is the state's DROP platform. Start at step 1 and follow the arrows.Five steps. The label on each one says who does it.
- YouConnectYour DROP API key, or our client that hashes on your machine so no personal data leaves you.
- DROP runnerDownloadThe list is pulled the moment DROP says it is ready.
- DROP runnerMatch and deleteHashed identifiers matched with the state's exact rules; every match is deleted.
- DROP runnerDirect providersEach service provider gets a manifest and a one-click acknowledgment.
- DROP runnerReportStatus file uploaded, PDF filed: files, counts, suppression totals, the audit trail.
Your part
- Connect once, then read the report after each cycle.
- With the hash-only client, no personal data leaves your machine.
Runs on its own
- The 45-day clock, with reminders at 15 days, 5 days and overdue.
- Every file, count and acknowledgment kept as the audit trail.
What is handled for you
- The clock. Reminders at 15 days, 5 days, and overdue, so a 45-day deadline is never a surprise.
- Exact matching. Verified against every worked example in CalPrivacy's technical documentation, version 1.2.0.
- Incremental batches, Removed files and empty lists handled the way the platform expects, including consumers who withdraw.
- Suppression list maintained for you, matched and unmatched, to screen newly acquired records.
- Two-factor sign-in for every user, encrypted API keys, files stored encrypted in private storage.
- One registered entity
- File uploads or hash-only client
- Up to 1 million records
- Reports, clock, audit trail
- Everything in Starter
- Database and warehouse connectors
- Service-provider notices with acknowledgments
- Suppression screening API
- Several registered entities
- Each subsidiary needs its own DROP account; we run them all
- Priority support
RMD Keeper
Every US voice provider must keep an accurate filing in the FCC's Robocall Mitigation Database, recertify it by 1 March each year, and update it within 10 business days of any change. A removed filing means other carriers must block your calls; the FCC removed more than 1,200 providers in one order in 2025. RMD Keeper checks the database every night, watches the carriers you exchange traffic with, writes your mitigation plan from plain-English answers, and tracks every deadline.
The same calendar carries the rest of what a small provider owes: the FCC's CPNI, accessibility, Form 499, numbering and regulatory-fee dates, state 911 fee remittances and state commission annual reports for the states you tick, and your STIR/SHAKEN certificate dates. One list, sorted by what is due next, with the official place to file on every row. From $39 a month, 14-day free trial.
Gatesheet
From 1 October 2026 every contractor and subcontractor on a Connecticut prevailing-wage project must keep a daily record of who was on site, with arrival and departure times, and send it to the contracting agency each week; Rhode Island public works over $1 million carry a daily prevailing-wage log of their own. Gatesheet is that daily sign-in sheet, kept online from the gate and exported in the form the agency asks for. Start with the free sheet.
Services
Compliance automationA recurring regulatory obligation turned into a scheduled, logged, reportable process, with the evidence an auditor will ask for. DROP runner is the template; the same approach fits any cycle with a deadline and a record-keeping duty.
Data pipelines and integrationsMoving, matching and reconciling data between warehouses, CRMs, files and third-party APIs, with verification at every step rather than trust in an exit code.
Internal tools and workflow automationSmall, well-built web tools that replace a spreadsheet and an inbox: intake forms, approvals, scheduled jobs, notifications, and an audit trail, hosted and maintained for you.
API integration and monitoringConnecting your systems to government and vendor APIs that change under you, with retries, heartbeats and alerts so a silent failure never becomes a missed deadline.Engagements are fixed-scope and written down before work starts. Write to support@jayanas.com with what you are trying to get done.
What we are building next
Independent audits of data brokers begin in 2028. A single export of every cycle, response, acknowledgment and log for the audit period, in the order an auditor reads it.
Check newly acquired records against a broker's suppression list before they are sold or shared, from a CRM, a warehouse job or a spreadsheet upload.
Since September 2026, software and device vendors selling into the EU must report actively exploited vulnerabilities within 24 hours. An intake, timers, templates and an evidence log sized for small vendors.
About
Jayanas LLC is a Nebraska company founded by Chandra Nellore. We act as a service provider under your written agreement and can hold hashes only where the work allows it. Nothing on this page is legal advice; the laws and regulations that apply to you govern your obligations.