DROP compliance without hiring a privacy engineer.
Every 45 days, California's DROP platform hands you a list of people who asked to be deleted. Quietlist matches it against your records inside your own systems, helps you act on the matches, and reports back on time. You also keep a record you can show an auditor.
A few emails a year became a standing obligation.
Before DROP, most small brokers handled deletion requests by hand, one email at a time. Now the state sends every registered broker the same growing list, and each cycle has to be matched, actioned and reported.
Source: CalPrivacy, DROP FAQ (Oct 2026) and Processing DROP requests. This is a summary, not legal advice.
How it works
A small piece of software runs in your environment, plus hands-on help from a person for your first cycle.
Pull
Downloads the DROP lists you've selected on schedule, using your own API key. The key never leaves your systems.
Match
Standardizes and hashes your records to CalPrivacy's spec and compares them against every list you hold, from emails and phones to ad IDs.
Act
Gives your team a clear deletion worklist, keeps your suppression list up to date, and checks new data before it comes in.
Report
Uploads a status for every request inside the window and keeps a timestamped log you can hand to an auditor from 2028.
Your consumer data stays with you.
Quietlist is built so we never need to hold the data you're being asked to delete. Matching happens on your side, and only hashed values and status codes go to the state.
- Runs on your infrastructure, not ours
- No raw consumer data sent to Quietlist
- You and your counsel decide exemptions; we record them
- Readable logs of every cycle, every request
- Leave at any time and keep all your records
Who it's for
Quietlist is built for the brokers the big privacy platforms weren't designed around.
A good fit
List brokers, people-search sites, B2B contact data, location and ad-tech data companies. Teams that have the data in a database but no one whose job is privacy engineering.
Probably not a fit
Companies that already run DROP through an enterprise privacy platform, or that have an in-house team to build and maintain the integration.
Founding customers
I'm onboarding the first few brokers now. Founding customers get their first DROP cycle set up and run together with me, plus a reduced flat monthly price locked in for as long as they stay.
Questions
Straight answers.
Are you affiliated with CalPrivacy or the State of California?
No. Quietlist is an independent software service. DROP is run by the California Privacy Protection Agency (CalPrivacy).
Is this legal advice?
No. Quietlist handles the technical work of pulling, matching, actioning and reporting. Decisions about exemptions and how the law applies to your business belong with you and your counsel.
Do you store our consumer data?
No. The matching runs in your environment. We help set it up and monitor that cycles complete, without taking custody of the records.
What does it cost?
A one-time setup fee and a flat monthly price, with no per-request charges. Founding customers get a reduced rate. Ask on a call and you'll get a straight number.
We already started processing DROP manually. Is it too late?
Not at all. Every 45 days is a fresh cycle. We can take over from where your last upload left off and keep your suppression list continuous.
About
Quietlist is built by Alon, a software engineer based in Israel. I started it after seeing how DROP turned a handful of deletion requests a year into a large recurring job for small data brokers, most of whom don't have an engineer to spare for it.
Email me directly: alon@quietlist.net