Security
How we protect your data today, stated plainly.
Data in Transit & at Rest
All traffic to our website and the Dexal app is encrypted in transit over HTTPS/TLS. Contact form submissions, lead information, and workspace data are stored in encrypted databases.
Tenant Isolation
Your organization's data — messages, files, tasks, and records — lives in your organization's Dexal account and is only visible within your org, scoped by each member's role. Data is never shared between customers.
Payments
Subscription billing is handled by Stripe. We never see, collect, or store your card number or other payment details.
AI Is Off by Default
The optional AI add-on only processes your organization's data if an admin enables it, in an isolated, tenant-scoped context. Your content is never used to train any AI model, and every AI action is logged in your organization's audit trail.
No Trackers, No Data Sales
We do not sell your data, and our website uses no tracking pixels, ad networks, or social media trackers.
Where We Are Today
Dexal is an early-stage company. We do not yet hold formal certifications such as SOC 2 or ISO 27001, and we won't claim them until we do. This page describes the practices we actually follow today, and we'll keep it updated as our security program matures.
Reporting a Security Issue
If you believe you've found a vulnerability in Dexal, please email [email protected] with the details. We read every report and will respond as quickly as we can. Please give us a reasonable opportunity to fix an issue before disclosing it publicly.
For how we handle personal information, see our Privacy Policy.