Security and Data Handling at Dapto
Where Dapto's security posture stands today - encryption, data ownership, compliance status, and payment handling - in plain terms.
A plain-terms summary of Dapto's current security and compliance posture, for teams evaluating Dapto for a process that touches sensitive data.
Quick Answer
Dapto encrypts data in transit and at rest using 256-bit encryption, is pursuing SOC 2 Type II certification, and is working toward GDPR compliance. Customer data and outputs remain exportable, and payments are processed through Stripe rather than Dapto handling raw card data directly.
Where things stand today
- Encryption: Data is encrypted using 256-bit encryption.
- SOC 2 Type II: In progress. This page will be updated when the audit completes.
- GDPR: Compliance work is ongoing.
- Data ownership and export: Your data and outputs are exportable - see Dapto's approach to data portability. You're not locked into the platform.
- Payments: Billing is processed through Stripe, a PCI-compliant payment processor.
Evaluating Dapto for a regulated use case
If you're assessing Dapto for financial services, healthcare, or another regulated context and need specifics beyond what's here - data residency, sub-processors, incident response - contact the Dapto team directly.
FAQ
Is Dapto SOC 2 Type II certified?
The audit is in progress. This page will be updated when it completes.
Can I export my data if I stop using Dapto?
Yes - data and outputs remain exportable.
Questions about a specific requirement?
Contact the Dapto team directly.
See how this applies in practice with Dapto Workbench - an AI work platform for reports, documents, data checks, and other repeatable business work.
Learn more