Security
What is protected today, and what comes at launch.
We would rather tell you exactly where things stand than show you badges we have not earned. Here is the plain status of each protection.
Status by protection
Where each protection stands.
| Protection | What it means | Status |
|---|---|---|
| Local file reading | Files you import in the demo are read in your browser and never uploaded. | In the demo today |
| Example data only | The demo contains only invented buildings, people and documents. | In the demo today |
| No tracking cookies | This site sets no tracking or advertising cookies, and fonts are served from our own host. | In the demo today |
| EU hosting | Your records and documents stored in the European Union. | At launch |
| Encryption | Data encrypted in transit and at rest. | At launch |
| Separation between customers | Each customer's data is isolated in the database itself, with automated tests that check it. | At launch |
| Private document storage | Documents stored privately and opened only through short-lived links. | At launch |
| Expiring upload links | Contractor links open one renewal only and stop working after their end date. | At launch |
| Two-factor sign-in | An extra step at sign-in to protect accounts. | At launch |
| Backups | Daily backups, with restores tested, not just assumed. | At launch |
| Data processing agreement | A GDPR data processing agreement for every customer. | At launch |
Principles
How we make security decisions.
Honest status
We say what is in place and what is planned. We do not show certifications we do not hold.
Least access
People and systems get the access they need and nothing more, including our own team.
Your data, your control
Export at any time; delete your account and your data goes with it.
No secondary use
We do not sell your data, use it for advertising or use it to train AI models.
What we do not claim. Dueclear does not hold SOC 2, ISO 27001 or similar certifications today, and the demo is not a production system. Please do not enter real customer records or personal data into it.