Security and Shared Responsibilities

Version / effective date: 2026-10-04

Safeguards

DDC supports authentication, role and tenant access controls, signed licensing, scoped storage access, security audit events and HTTPS deployments. Payment collection is handled by Stripe. Security depends on the deployed configuration and ongoing maintenance; no SOC 2, ISO, HIPAA or other certification is claimed by this page.

Your responsibilities

Use strong authentication, restrict invitations and sharing, update self-hosted installations, protect backups and credentials, and review connected providers. Report suspected incidents to support@howard-techworks.com. We investigate and provide legally required notices; not every diagnostic event is a confirmed personal-data breach.

Vulnerability reports

Privately send a reproducible description, affected version and minimal non-sensitive evidence. Do not access other customers’ data, disrupt operations or publicly disclose credentials.