Trust Center

• SOC 2 Type II certified infrastructure providers
• ISO/IEC 27001 certified data centres
• GDPR-compliant data processing regions available
• Enterprise-grade SLAs and uptime guarantees
• Redundant, multi-region architecture
• Automated scaling and failover capabilities

• Structured security policies and procedures
• Regular security assessments and testing
• Employee security awareness training
• Incident response planning and procedures
• Vendor security evaluation processes
• Continuous monitoring and logging

• Data minimisation principles applied across the platform
• User consent management and preference controls
• Data subject rights processes (access, deletion, portability)
• Privacy impact assessments for new features
• Data processing agreements available for enterprise customers
• Transparent data handling practices documented in our Privacy Policy

• AI outputs are constrained by policy and baseline configurations
• No cross-client learning or data mixing
• No public model training on customer data
• Transparent AI decision reasoning and audit trails
• Human-in-the-loop governance for critical decisions
• Regular review of AI behaviour and outputs

Dainin has not yet completed a SOC 2 audit. Our security controls are designed in alignment with SOC 2 Trust Services Criteria, and we are actively preparing for a formal Type I audit.

Our infrastructure providers (AWS, GCP) maintain their own SOC 2 Type II certifications, providing a certified foundation for our platform.

Dainin is not currently ISO/IEC 27001 certified. Our security practices are designed in alignment with the ISO 27001 information security management framework, and we continue to mature our security programme toward formal certification.

Our cloud infrastructure providers maintain ISO/IEC 27001 certifications for their data centre operations and services.

Dainin is designed to operate in accordance with GDPR principles. We implement appropriate technical and organisational measures to protect personal data and support data subject rights.

Data Processing Agreements (DPAs) are available for enterprise customers who require them for their own GDPR compliance obligations.

Detailed security documentation, penetration test reports, and additional compliance materials may be made available to prospective and existing enterprise customers under NDA.

To request access to our security documentation pack, please contact our security team.