Security

Compliance and security practices at DX

At DX, security isn’t just a priority—it’s a commitment. We continuously enhance our protections and adhere to strict compliance standards to safeguard our customers and platform.

AICPA SOC2
GDPR
DPF

Trusted by the most security conscious customers

Workspace security

Role-based access control: Assign roles to ensure that the right people have the right permissions to work on your projects.
Tenant headers: Ensure secure access by restricting DX workspace and Data Cloud usage to your corporate network.
Audit logs: Track and analyze your team members' activity. Accessed by team members with the owner role.
Directory sync: Manage your organization’s memberships from third-party identity providers.

Frequently asked questions

Is DX SOC 2 compliant?

Yes. DX's information security program is SOC 2 Type 2 compliant, meeting the AICPA Trust Services Criteria to ensure top-tier data protection and security.

Is DX compliant with data protection regulations?

Yes. DX is GDPR and CCPA compliant, DPF certified, and follows strict organizational, technical, and administrative measures to protect Personal Data from unauthorized access, loss, alteration, or misuse.

Does DX conduct penetration testing and security assessments?

Yes. DX regularly undergoes penetration tests, vulnerability assessments, and source code reviews to evaluate the security of our application, architecture, and implementation. We work with external security assessors to ensure best practices and test for OWASP Top 10 web application vulnerabilities and customer application isolation across our platform.

How does DX handle data encryption?

DX encrypts data in transit using TLS 1.2+ (or an equivalent protocol) and at rest with AES-256 block-level encryption (or an equivalent standard) to ensure maximum security.

Where can I find a list of DX's subprocessors?

DX’s complete list of subprocessors can be found on our subprocessors page.

Does DX read or access my source code?

No, DX does not read or access your source code. While DX connects to various engineering tools, it only accesses the data necessary to provide insights.

DX Customers