Why security matters here

Security protects the evidence record institutions build over time.

Security protects the evidence record institutions build over time.

DueDash does not only protect documents. It protects the retained record of how an organization reviews evidence, escalates findings, makes decisions, and learns over time.

That record often becomes a critical institutional asset. It must remain attributable, auditable, and controlled.

The architecture of trust

Your data. Your evidence. Your institutional memory.

DueDash does not only protect documents. It protects the retained record of how your organization reviews evidence, escalates findings, makes decisions, and learns over time.

1

Logical tenant isolation

DueDash currently operates as a SaaS platform with tenant separation, access controls, encryption, and auditability.

2

Deployment alligned to requirements

Dedicated or customer-controlled deployment models may be evaluated where security, regulatory, operational, and commercial requirements justify them.

3

Evidence & decisions protection

Review history, reviewer actions, escalations, and decision context are retained as part of the institutional record.

4

Clear seperation of duties

DueDash coordinates workflow intelligence and review evidence. It does not take custody of funds, execute transactions, or act as legal record-keeper.

Security practices

Protection at every layer.

Data at rest

Documents and records are protected using encryption at rest.

Data in transit

Information moving between users and DueDash is encrypted in transit.

Authentication & access

Role-based access controls support appropriate user permissions.

Audit login

User actions and review events can be logged to support traceability.

Tenant seperation

Customer environments are logically separated within the SaaS architecture.

Backups & continuity

Backup and recovery practices are maintained according to operational policy.

Deployment models

Deployment aligned to operational requirements.

DueDash supports multiple deployment approaches, ranging from logically isolated SaaS environments to dedicated deployments for customers with heightened security, regulatory, contractual, or operational requirements. Deployment models range from logically isolated SaaS to dedicated and non-custodial environments depending on customer, security, regulatory, and operational requirements.

Independent assurance

Designed for security review.

DueDash supports customer-side vendor security assessments where appropriate. Security documentation, control descriptions, and deployment details can be reviewed during a security or compliance discussion.

DueDash can discuss current security practices, deployment options, assessment readiness, and customer security requirements during a security review.

Responsible disclosure

Working with the security community.

If you believe you have found a vulnerability in DueDash, contact security@duedash.com. Please make a good-faith effort to avoid privacy violations, data destruction, service disruption, or access to accounts or systems you do not own or have permission to test.

General questions: support@duedash.com
Security reports: security@duedash.com

Clear delineation

A clear delineation of service.

DueDash is a workflow intelligence software provider. DueDash is not a broker-dealer, investment adviser, transfer agent, custodian, placement agent, legal adviser, tax adviser, or medical adviser. DueDash preserves workflow evidence and decision memory. It does not make investment, legal, tax, or medical determinations. All document execution, KYC/KYB screening, cash movement, statutory register maintenance, and regulated actions remain with the client's appointed administrator, licensed partner, or responsible professional.

Review the security posture with our team.

Bring your security, legal, or compliance stakeholders and walk the controls against your requirements.