Security

Our approach

We design with a privacy- and security-first mindset: collect the minimum, isolate sensitive workloads, and default to the most protective option. Security is reviewed throughout the product lifecycle, not bolted on afterwards.

Encryption

Data is encrypted in transit using modern TLS and at rest using industry-standard algorithms. Secrets and credentials for connected services are stored in dedicated, access-controlled vaults.

Data minimization

We send only what a request actually needs, and retain it only as long as it is useful to you. What leaves Dewiride AI, and to whom, is set out in the Privacy Policy.

On your phone

The mobile app holds your session in the device's hardware-backed keystore, encrypted with a key that cannot be exported from it and that the device will only use while it is unlocked. You can lock the app itself behind your fingerprint or face; that check is performed by Android, and your biometrics never leave the device or reach us.

Signing out deregisters the device before anything else happens, so a phone you have signed out of stops receiving your notifications immediately.

Infrastructure security

Our infrastructure runs on reputable cloud providers with strong physical and network security. We use network segmentation, hardened configurations, and continuous patching to reduce risk.

Access controls

Access to production systems and personal data follows the principle of least privilege, is granted on a need-to-know basis, requires strong authentication, and is logged and reviewed.

Monitoring and response

We monitor our systems for anomalies and maintain an incident response process so we can detect, contain, and remediate issues quickly. Affected users are notified where required by law.

Responsible disclosure

We welcome reports from the security community. If you believe you have found a vulnerability, please email security@dewiride.com with details so we can investigate. We ask that you avoid accessing others’ data and give us reasonable time to respond before public disclosure.

Contact us

Security questions or reports? Email security@dewiride.com or reach us via dewiride.com/contact.