Your work is safe here
What we do today to protect your data — in plain language, with no badges we haven't earned.
Encryption
All traffic is encrypted in transit (TLS), and your data is encrypted at rest — on every plan, not just paid ones.
Sign-in & access
Authentication is handled by Clerk — Google, email code, password, and passkey. dotby never sees or stores your password.
Inside a workspace, access is controlled with admin, manager, member, and guest roles, so people only see what their role allows.
Workspace isolation
dotby is multi-tenant with per-workspace isolation: every query is scoped to your workspace, so one customer's data is never visible to another.
Infrastructure
dotby runs on a small set of trusted providers:
- Convex — database & real-time backend
- Cloudflare — file storage (attachments)
- Clerk — identity & sign-in
- Resend — transactional email
Your data stays yours
Export your data anytime and delete your workspace whenever you want. Access, export, and deletion requests are honored under LGPD/GDPR principles — see the Privacy policy for the full detail. No lock-in.
Where we are today
We are in early access and honest about it: no SOC 2 yet. Formal certifications are on the roadmap as dotby grows. Security questions or reports: hello@dotby.app.