We take security seriously. Every byte of your Amazon data lives behind top-grade security layer, audited by Amazon itself under their hardest data protection process.
Pre-approved by Amazon to pull customer addresses, customizations and gift messages on behalf of every connected seller.
Every database row, every cached file, every backup encrypted with the standard used by the U.S. government for classified data.
Continuously monitored cipher suites. Weak protocols refused. Every API call, every dashboard session, every Amazon connection.
Encryption, retention, key rotation, vulnerability management and incident response — all audited by Amazon under the Public PII Process.
Full external pen test on every component of the data flow, with reports on file. Findings remediated and re-verified.
Every component scanned twice yearly minimum, plus continuous automated monitoring for unusual access patterns and emerging vulnerabilities.
Your DataDoe data lives in a Tier-3+ cloud datacenter in Northern Virginia, USA — physically isolated, redundantly powered, and continuously monitored. Every customer organization gets its own logically separated data partition.
This isn't a permission setting we could accidentally turn off. It's how the database is architected: cross-organization access is impossible by design, not just disallowed. You see your data. Nothing else, ever.
Three independent encryption layers protect your data across its entire lifecycle in DataDoe — applied automatically, enforced everywhere, monitored continuously.
Every database row, every cached file, every backup — encrypted with 256-bit Advanced Encryption Standard, the same cipher the U.S. government uses for top-secret data classification.
Every API call, every dashboard session, every Amazon connection. We continuously monitor cipher suites and refuse weak protocols. No exceptions, no downgrade attacks.
Your Amazon connection credentials live separately from your data, in a key management system, and rotate periodically. Continuous monitoring flags any unusual access pattern.
To pull customer addresses, customizations and personal data from Amazon SP-API, every organization must complete the Public PII Process — a months-long, multi-stage audit covering encryption, retention, access controls, vulnerability management and incident response. Here's exactly what was reviewed.
How DataDoe handles your data when you use AI features inside the platform — and when you connect your own AI tool through MCP, REST API, or SDK.
When you use AI features inside the DataDoe app — daily briefs, ask-anything chat, suggested actions — we send only the minimum data the model needs to answer your specific question. Never your full warehouse.
When you connect Claude, Cursor, Codex, ChatGPT or any AI tool through MCP or our REST API, the tool requests what it needs and we send only that. You set the scope. You see every call. You revoke access in one click.
Not by us. Not by the AI providers we connect to, when configured properly through their enterprise plans — which we recommend and document for every supported provider.
Every user account, every API key, every integration.
Every user can set up 2FA with any TOTP authenticator app — Google Authenticator, Authy, 1Password, hardware keys.
Every API and MCP key is generated, shown to you a single time, then permanently hidden — even from us. Lose it, you regenerate.
Every team member gets a scoped role. Every integration gets the narrowest permissions needed.
Clear retention rules. No surprises. No "we keep it for analytics purposes" small print.
Encrypted at rest, accessible via dashboard, API, MCP, SDK and BigQuery.
Sync from Amazon stops. No new data added. Your existing data marked for deletion.
All your data — including backups — permanently removed from our systems, verified by audit log.
Request immediate full deletion via dashboard or email. Completed and confirmed within 24 hours, audit-logged. Plus: export your full historical dataset in CSV or JSON before you go — no lock-in, ever.
We'll walk you through our security setup, share compliance docs, or answer your security team's questions. Just reach out.
Every integration. Full onboarding support. If it’s not the best decision you made in 2026, you can cancel anytime.
We use cookies to improve your experience and analyze traffic. By clicking "Accept", you agree to our use of cookies. Read the Privacy Policy.
