Control connections
Configure which tools, servers, and IPs Dash can connect with.
Security
Puppies need a fence.
Dash runs in a dedicated sandbox that acts like a fence. Automatically deployed and transparent to you.
Granular permissions
Define what operations Dash can perform in each tool, allow or deny, down to the specific action.
People-aware access
Restrict access by specific users or roles so only the right people can authorize sensitive operations.
SOC 2 Type IIAttested 
ISO/IEC 27001Certified Why governance matters
Letting every employee run their own AI is a security risk.
Unmanaged AI subscriptions can turn useful tools into shadow infrastructure. Dash gives the whole team one governed way to use AI at work.
01 · Shadow AI problem
Personal accounts scatter company data.
Employees paste customer and company information into AI accounts you cannot see, govern, or revoke.
02 · The Dash approach
One AI teammate works inside a fence.
Dash runs in an isolated workspace with controlled connections, permissions, and approval gates.
03 · The difference
Your team gets speed without losing control.
People can use capable AI while the business keeps visibility over where data goes and what actions happen.
How Dash is built
Security your team can verify.
Dedicated sandbox execution
Dash runs work in an isolated sandbox that limits where information can move. The sandbox is the fence between AI capability and your systems.
Workspace isolation
Every Dash workspace runs in its own execution context. Data never crosses workspace boundaries. Two customers running Dash share zero state.
OAuth where supported
Dash uses OAuth where supported and keeps tool access revocable. You can disconnect a tool in one click.
Approval flow on mutating actions
Anything that sends an email, posts publicly, writes to your CRM, or spends money requires explicit approval in Slack or Microsoft Teams. Dash drafts, you ship.
Encrypted credential storage
Sensitive workspace credentials are encrypted at rest, handled server-side, and only used when Dash needs to act on your behalf.
No training on your data
Conversations and tool outputs stay yours. We use model APIs with training opt-out enabled across the board.
Clean workspace on demand
Wipe your entire Dash workspace, including memory and history, with one command. Deletion is irreversible and complete within 24 hours.
Independent assurance
Independent assurance for the systems behind Dash.
Dash is SOC 2 Type II attested and ISO/IEC 27001 certified, with independently verified controls for security and information risk management.
Reports and supporting materials are available to customers and prospects on request.
SOC 2
Type II attested
Control design and operating effectiveness independently examined. ISO/IEC 27001
Certified ISMS
A certified system for managing information security risk.Security documentation
What your team can review.
SOC 2 Type II
AttestedISO/IEC 27001
CertifiedSecurity overview
Available on requestPrivacy requests
SupportedData processing terms
Available on requestRegional hosting options
EnterpriseVendor review support
Available on requestCompliance questions, answered.
Is Dash SOC 2 Type II attested?
Yes. Dash is SOC 2 Type II attested, covering the design and operating effectiveness of applicable controls over a review period.
Is Dash ISO 27001 certified?
Yes. Dash is ISO/IEC 27001 certified and operates a certified information security management system.
Can my security team review the reports?
Yes. Customers and qualified prospects can request the SOC 2 report, ISO/IEC 27001 certificate, security overview, and supporting materials from our team.
Sub-processors
Who Dash works with.
We use a short list of trusted vendors. All sub-processors are reviewed annually.
- Anthropic AI model provider
- OpenAI AI model provider
- Microsoft Azure Cloud provider
- AWS Cloud provider
- Pipedream OAuth & integration catalog
- Cloudflare DNS, CDN & WAF
- Resend Transactional email
- Stripe Payment processing
Security questions?
Ask for our security overview deck or send a question to the team.