Last updated September 2026
Security
Two engineers, one shared standard: collect less, encrypt everything, and give people a straight answer.
Encryption
All traffic runs over TLS. Data at rest is encrypted by our infrastructure providers. Secrets are stored in managed secret storage, never in source code.
Access control
Row-level authorisation scopes every record to its owner. Administrative access is limited to the two founders and used only to operate or support the service.
Bugspray recordings
Recording is explicit and user-initiated. Password fields are masked by default, and workspaces can add their own selectors to redact sensitive elements before capture.
HoldingsHub connections
Broker and holdings connections are read-only. We never request trading permissions and cannot place orders on your behalf.
Reporting a vulnerability
Email hello@dhanify.tech with steps to reproduce. We acknowledge reports within two working days and will credit you once a fix ships, if you would like that. Please do not test against other people's data.