Datumry security
Security controls designed around business data
Datumry uses layered application controls to protect accounts, projects, connected systems, and analytical work. Security is an ongoing engineering practice, not a one-time claim.
Account and session protection
Datumry hashes passwords, uses signed session cookies, supports email verification and session revocation, rate-limits sensitive authentication actions, and requires strict production secrets and secure-cookie settings.
Project-scoped authorization
Viewer, editor, manager, and owner roles determine who can view project data, change models, operate integrations, collaborate, share dashboards, and manage access. Authorization is enforced by the backend for project operations.
Protected connector credentials
Private integration credentials are encrypted using authenticated encryption before storage, scoped to their connection, excluded from account exports, and never returned to the browser after storage. Least-privilege and read-only credentials are recommended.
Operational safeguards
Datumry validates production configuration, bounds uploads and connector reads, separates durable background jobs from web requests, records worker health, and keeps sensitive values out of normal application logging and error reporting.
Data controls
Account settings support data export, session review, and permanent account deletion. Dashboard share links can be revoked and may be protected with passwords and expiration dates.
Responsible use
Datumry is not currently intended for regulated or highly sensitive data unless explicit written agreement and the necessary safeguards are in place. Users should retain independent copies of business-critical source data and exports during the beta.
At a glance
- Encrypted connector-credential vault
- Backend-enforced project roles
- Revocable sessions and dashboard shares
- Production-strict configuration checks
Have a security question?
Contact Datumry before connecting a system or uploading data that requires contractual, regulatory, or specialized safeguards.