DROP compliance: software vs. a service, and what small brokers actually need
Every DROP cycle runs through the same seven steps: pull, standardize, hash, compare, act, direct downstream vendors, and report. (See the 45-day DROP cycle, operationally for the full sequence with statute cites.) Software handles the first four well. It doesn’t run the rest on its own, and that gap is the real difference between compliance software and a compliance service, whichever side of that line a given vendor is selling.
What matching software actually does
A matching engine pulls the state’s list, standardizes a broker’s records to DROP’s formatting rules, hashes them with SHA-256, and compares the results for exact equality. That’s real, useful work. It’s the part of the cycle that’s genuinely technical, and getting it wrong (a phone number with a country code left on, a ZIP with the +4 still attached) is what turns a real match into a false “not found.” Good matching software gets that step right every round, without a person re-deriving the standardization rules from scratch each time.
What it doesn’t do
The DROP regulation only covers matching. The rest of the obligation still needs a decision-maker: which matched records get deleted outright, which get an exemption applied and under what written policy, which downstream vendors get a deletion directive and in whose name, and what gets filed with the state and kept on record for six years. None of that is a matching problem. A tool that returns a clean deletion list has finished its job. The broker’s obligation has not.
The 2028 audit makes this concrete: the recordkeeping duty belongs to the broker regardless of which tool did the matching, and a software license that disclaims liability doesn’t transfer it. An auditor reading a broker’s file in 2028 isn’t going to ask which vendor ran the hash comparison. It’s going to ask for the deletion records, the exemption documentation, and the vendor notices, and none of those come out of a matching engine on their own.
What that split looks like at OptOutReady
We sell both pieces separately, because most 3-to-40-person brokers actually need to think about them separately.
| Match Engine | Cycle Operations | |
|---|---|---|
| What it does | Runs the same matching software we use ourselves, every 45 days, and hands back a ready-to-run deletion list | Runs the whole cycle: the matching, plus the deletions, the vendor notices, the state filing, and the six-year record |
| Who acts on the output | Your team | Us, on your lawyer’s written instructions |
| Price | $500/mo, billed yearly | From $750/mo |
| Fits | A broker with someone in-house who can own the deletions, the exemption calls, and the filing | A broker where nobody currently has the time, or the standing, to be that person |
Neither is a lesser version of the other. Match Engine is genuinely the matching software, not a stripped-down demo of the service. What changes between the two is who does everything after the deletion list comes back.
Which one a given broker actually needs
The honest test isn’t headcount. It’s whether someone already owns the parts a matching tool can’t touch: exemption determinations with counsel’s sign-off, the vendor notices, the state report, six years of retrievable records. A broker with that person in place gets real value from software alone. A broker without one is buying a fresh deletion list every 45 days and still facing the same open obligation the list doesn’t close.
Not sure which side of that line a given operation sits on? Book a 20-minute call and we’ll look at an actual cycle, not a hypothetical one.
Common questions
Does DROP compliance software satisfy the law on its own?
No. Matching software covers the pull, standardize, hash, and compare steps under 11 CCR §7613. The deletion, the exemption documentation, the vendor notices, and the state report are separate obligations that still need a person and a written record behind them, whichever tool ran the match.
What's the actual difference between Match Engine and Cycle Operations?
Match Engine is the matching software itself: $500 a month, billed yearly, and it hands back a ready-to-run deletion list every 45 days. Cycle Operations runs the whole thing, from $750 a month: the same matching, plus the deletions, the vendor notices, the state filing, and the six-year record, carried out on your lawyer's written instructions.
Can a broker start with software and move to the full service later?
Yes. Match Engine and Cycle Operations run on the same matching engine, so switching doesn't mean starting over. The usual trigger is realizing nobody in-house actually owns the exemption calls, the vendor notices, or the filing once the software hands back its list.