Security at Datastory
Security is fundamental to everything we do. We implement comprehensive security measures to protect your data, ensure platform reliability, and maintain your trust.
Last updated: September 8, 2025
Our Security Measures
Data Encryption
All data is encrypted in transit using TLS 1.3 and at rest using AES-256 encryption.
Access Controls
Role-based access control (RBAC) and multi-factor authentication for all user accounts.
Infrastructure Security
Hosted on enterprise-grade cloud infrastructure with 24/7 monitoring and DDoS protection.
Regular Audits
Quarterly security audits and penetration testing by independent security firms.
Data Backup
Automated daily backups with point-in-time recovery capabilities.
Privacy by Design
Security and privacy considerations built into every feature from the ground up.
Compliance & Certifications
Datastory maintains compliance with industry standards and regulations:
- GDPR (General Data Protection Regulation) compliance
- ISO 27001 certification (in progress)
Incident Response
We maintain a comprehensive incident response plan that includes:
- 24/7 security monitoring and alerting
- Rapid incident detection and response procedures
- We will notify affected customers without undue delay in accordance with GDPR requirements.
- Post-incident analysis and improvement processes
Reporting Security Issues
If you discover a potential security vulnerability, please report it to us immediately:
Security Contact
Email: hello@datastory.tech
For sensitive reports, please use our PGP key
We follow responsible disclosure practices and appreciate security researchers who help keep our platform secure.
Data Location & Processing
Your data is processed and stored with the following considerations:
- Primary data centers located in EU/EEA regions
- Backup storage in geographically distributed locations
- All international transfers protected by appropriate safeguards
- Enterprise customers may request data residency options. Please contact us to discuss availability.
Questions About Security?
For questions about our security practices or to request additional security documentation:
Security Team
Email: hello@datastory.tech
Response time: Within 24 hours for security inquiries
