> ## Documentation Index
> Fetch the complete documentation index at: https://notikaai.mintlify.site/llms.txt
> Use this file to discover all available pages before exploring further.

# Security

> Learn about Dreamlit's security measures and data protection practices

<Note type="warning">
  Dreamlit takes security seriously. We maintain strict security protocols and
  perform regular audits to protect your data.
</Note>

<CardGroup cols={2}>
  <Card title="Security features" icon="shield-check">
    Our platform features encrypted transport, encryption at rest, dedicated
    database users, and regular security audits.
  </Card>

  <Card title="Compliance" icon="certificate">
    We maintain regular penetration testing and a security bug bounty program.
    GDPR and SOC 2 compliance coming soon.
  </Card>
</CardGroup>

## Overview

Dreamlit implements multiple layers of security to protect your data and ensure the safety of your notification workflows. Our founding team brings extensive security and engineering experience from companies like Netflix, Google, and Stanford, with a combined 20+ years of software engineering expertise.

These controls apply to all Dreamlit database integrations, including Supabase and direct PostgreSQL connections.

<CardGroup cols={2}>
  <Card title="Database security" icon="database">
    We use SSL/TLS-encrypted database connections, double-encrypted credentials
    at rest, and least-privilege permissions via a dedicated `dreamlit_app`
    database user.
  </Card>

  <Card title="Infrastructure" icon="server">
    Our platform includes intrusion detection, automated vulnerability
    scanning, and 24/7 infrastructure monitoring.
  </Card>
</CardGroup>

## Key security features

<AccordionGroup>
  <Accordion title="Database access controls" icon="lock">
    * Dedicated `dreamlit_app` user for stronger isolation and least privilege
    * Scoped permissions to restrict access to only required tables/operations
    * Database credentials are double encrypted at rest
    * Credentials are never exposed in plaintext
    * Access logs for database operations
  </Accordion>

  <Accordion title="Data processing" icon="shield">
    * Data encrypted in transit
    * Data encrypted at rest
    * No persistent storage of your application data outside your database
    * Automatic data cleanup after processing
    * Regular security patches and updates
  </Accordion>

  <Accordion title="Authentication and authorization" icon="key">
    * Role-based access control (RBAC) (coming soon)
    * Multi-factor authentication required (coming soon)
    * Single Sign-On (SSO) support
    * Organization-level data isolation
    * Comprehensive access logging
    * Session management and monitoring
  </Accordion>
</AccordionGroup>

## Network access and IP allowlisting

These controls apply to all Dreamlit database connections:

* SSL/TLS is always enabled for database connections.
* If your firewall requires allowlisting, use Cloudflare's published ranges: [Cloudflare IP ranges](https://www.cloudflare.com/ips/), [IPv4](https://www.cloudflare.com/ips-v4/), and [IPv6](https://www.cloudflare.com/ips-v6/).
* Cloudflare ranges may change over time, so keep allowlists synced.
* If you need a custom certificate attached for your database connection, contact [support](/docs/resources/getting-support).

## Infrastructure security

Our infrastructure is built with security in mind:

<Steps>
  <Step title="Network security">
    Multiple layers of firewalls and network segregation
  </Step>

  <Step title="Encryption">
    TLS/HTTPS for all connections and AES-256 encryption for data at rest
  </Step>

  <Step title="Access controls">
    Principle of least privilege with role-based permissions and 2FA
  </Step>

  <Step title="Monitoring">
    24/7 infrastructure and security monitoring with intrusion detection
  </Step>
</Steps>

## Reporting security issues

<Warning>
  If you believe you've found a security vulnerability, please report it
  immediately.
</Warning>

Contact our security team:

* Email: [security@dreamlit.ai](mailto:security@dreamlit.ai)
* Response time: Within 24 hours
* Bug bounty program available for eligible reports

<CardGroup cols={2}>
  <Card title="Privacy policy" icon="eye" href="https://dreamlit.ai/privacy-policy">
    Review our privacy practices
  </Card>

  <Card title="Terms of service" icon="file-contract" href="https://dreamlit.ai/terms-of-service">
    Understand our terms
  </Card>
</CardGroup>