security

Your data, protected.

Security is foundational, not an afterthought. Here's how we keep your diagrams safe.

Data encryption

All data is encrypted in transit (TLS 1.2+) and at rest using AES-256 via Supabase's managed infrastructure.

Authentication

We support OAuth 2.0 (Google, GitHub) and magic-link email sign-in. Passwords are never stored. Sessions are JWT-based with short expiry.

Access controls

Documents are private by default. Sharing is opt-in — you control exactly who can view or edit each diagram via permission links or direct invitations.

Infrastructure

Dezyn runs on Vercel (edge + serverless) with a Supabase Postgres backend hosted on AWS. Both providers maintain SOC 2 certifications.

Responsible disclosure

Found a vulnerability? Please email security@dezyn.io with details. We'll acknowledge within 48 hours and aim to resolve critical issues within 7 days.

Data retention

You can delete your account and all associated data at any time from the account settings page. Deletions are permanent and processed within 30 days.

Questions or concerns? security@dezyn.io