Trust
Secure, private and compliant
Dawnguard is security first, we build and operate our platform with the same rigor we bring to your cloud architecture.
Organizational security
Dawnguard believes in enabling business resilience by building a foundation that protects people, data and systems.
Governance and compliance
An ISMS and control framework are in place, compliant with SOC2, ISO27001, and other industry best practices. Regular audits are being conducted.
Roles and responsibilities
Board accountability is established, security responsibilities are embedded in the management team, and staff are informed about their responsibilities and have signed appropriate agreements (NDA/AUP, etc.).
Risk management program
Continuous risk assessments are conducted, and appropriate treatment strategies are executed.
Awareness
Staff are regularly trained to understand what security means for their role.
Third-party and supplier management
We assess and manage our third parties, and suppliers similarly to what customers expect from us.
Product security
Dawnguard designs and operates its product securely. We walk the talk.
Isolation
Each customer runs in a fully isolated environment. Dawnguard cannot access your data, environments are fully segregated, and your data is never used to train external AI models.
Design, build and operate securely
A secure software development lifecycle is established, and security is embedded from the start.
Quality assurance
Security testing is continuously conducted, and Dawnguard's built-in insights system validates our own environment.
Defense in depth
Multiple layers are in place to monitor, and protect Dawnguard.
Data security
You trust us with your sensitive data, so we make sure it's safeguarded properly.
Strict access controls
Least-privilege access is enforced by default, segregation of duties and environments is established, and access reviews are conducted regularly.
Encryption
Data is encrypted in transit and at rest.
Data governance
Data classification and handling are in place, and data retention policies are established.
Infrastructure security
The platform runs on cloud infrastructure. We make sure its properly locked, maintained and resilient.
Resillience
Resilient infrastructure is established to support business resilience.
Network segmentation
Segmentation is in place to seggregate infrastructure and data.
Back-ups and disaster recovery
Regular backups are taken, they are immutable and geo-redundant, and disaster recovery tests are performed periodically.
Vulnerability management
Systems are continuously scanned for vulnerabilities, and remediation is applied accordingly.
System lifecycle
Systems and endpoints are maintained.
Privacy
Dawnguard only collects the minimum required personal data. When collected, it is safeguarded and handled with care.
Read more in our privacy policy.
Contact
For any enquiries related to security, feel free to contact us at security@dawnguard.ai.