Built for control, run with care.
What DynamoOS does today to keep your data safe and yours. We only list what is in place, and say plainly what is not.
Access control
Role-based permissions, company-level access and an activity history on every document. Neither your plan nor Dynamo AI ever gives anyone more access than their role allows.
Identity
Single sign-on with Microsoft Entra ID, Google or any OpenID Connect provider, two-step sign-in for passwords, and accounts created and removed automatically from your directory (SCIM). Connected systems sign in with service accounts of their own.
Encryption
Every connection to your workspace is encrypted with HTTPS (TLS). Passwords and other stored credentials are encrypted with a key for each workspace or kept only as hashes, and the subscription data we send to a workspace is digitally signed. Backups are encrypted with AES-256.
Run by us, kept separate
We run DynamoOS for you. Each company's data is kept separate, travels over encrypted connections and is backed up by us.
Data location
We confirm in writing where your workspace's data is stored before you sign, and the companies that process data for us are listed on the Subprocessors page.
Backups
We back up every workspace automatically every day. Each copy is encrypted (AES-256) and integrity-checked, restores are tested into a scratch copy, and copies are kept for up to twelve months. Restores are run by our team, never automatically.
Your data stays yours
Removing an app or a failed payment never deletes data: the workspace becomes read-only and everything stays available to view and export, in standard formats.
Availability
The status page shows the measured state of each service from real health checks, plus the incidents and maintenance our team declares.
Incident response
Incidents that affect customers are published on the status page with updates until they are resolved. Every action our team takes on a workspace is recorded in an audit trail.
AI privacy
Dynamo AI runs on models that Dynamo operates for you, not on third-party AI services. It only reads what the person asking may already see, and customer data is not used to train models.
Compliance questions
If your sector has its own requirements, such as the EU GDPR, the Saudi PDPL, NCA ECC or SAMA rules, ask us and we will answer in writing, with the measures on this page and in our Security overview.
Subprocessors
No third party processes customer data for Dynamo today. Payment, e-mail and file-storage providers will be listed with their purpose and location before they are switched on.
Policies and documents
Report a security issue
If you believe you have found a vulnerability, e-mail security@dynamoos.com with the details (see also /.well-known/security.txt). Please do not test against customer workspaces.