Skip to main content

GDPR compliance

In short, DNSense adheres to GDPR guidelines. Provider credentials and tokens are stored encrypted, and our privacy policy sets out exactly what we collect and why.

Read our Privacy Policy
Legal

What GDPR means for your data

The General Data Protection Regulation sets the rules for how personal data is collected, stored, processed and erased. It has applied since 25 May 2018. It protects people who are in the EU or the EEA, whatever their nationality, and it reaches any company that handles their data regardless of where that company is based.

Our Privacy Policy sets out what DNSense collects, why, and how long we keep it.

How we protect your data

  • Provider credentials and API tokens are stored encrypted. They are unreadable without the application key.
  • Passwords are stored as a one-way hash, never in readable form.
  • One authorized person has access to the production database.
  • We back up twice daily, and raise that frequency as our data volume grows.
  • Our certificates come from Let's Encrypt and Cloudflare, and SSL Labs rates our configuration A+.
  • The site and the application are served over HTTPS.

Questions about your data, or want to exercise your rights as a data subject? Get in touch.