AICPA SOC 2 Framework Aligned
Our internal control environment, employee access policies, and data siloing architectures are strictly designed and mapped against the AICPA SOC 2 Trust Services Criteria (Security and Confidentiality).
Enterprise trust & compliance
Security, Privacy & Enterprise Compliance at Dhumi
At Dhumi, we understand that your enterprise data, custom workflows, and proprietary business logic are your most valuable assets. Our platform is engineered from the ground up with multi-layered security controls to ensure absolute confidentiality, data integrity, and high availability.
AWS / Microsoft Azure
AES-256 + TLS 1.3
Our Compliance Framework & Roadmap
Dhumi is fully committed to maintaining world-class security standards. We systematically map our internal operational, data handling, and infrastructure controls to international compliance frameworks.
Audit Roadmap
Dhumi actively maintains continuous readiness monitoring as part of our scheduled timeline toward formal third-party AICPA certification cycles.
ISO 27001 Methodology
Our risk management strategies, incident response protocols, and software development lifecycle (SDLC) follow the strict security management guidelines of the ISO/IEC 27001 standard.
Enterprise-Grade Data Protection
We implement rigorous technical safeguards to protect your data at every stage of its lifecycle within our low-code AI platform.
1
Advanced Encryption Standards
- Data in Transit: All data moving between your systems, users, and the Dhumi platform is protected using industry-standard TLS 1.3 encryption protocols to prevent interception.
- Data at Rest: All underlying customer databases, application states, and configuration metadata are fully encrypted using AES-256 bit encryption.
2
Strict Logical Tenant Isolation
- Dhumi is built on a highly secure multi-tenant architecture. We enforce absolute database-level separation and cryptographic controls to ensure that your custom ERP/CRM data, automated workflows, and AI prompts are entirely isolated.
- Your data belongs to you, and it is never shared, leaked, or used to train public AI models.
3
Secure Infrastructure & Physical Protection
- The Dhumi platform is hosted entirely within premier cloud data centers (AWS / Google Cloud). By leveraging these enterprise environments, Dhumi directly inherits physical and network protections that comply with AICPA SOC 2 Type II, ISO/IEC 27001, PCI-DSS, and FedRAMP.
AICPA SOC 2 Type IIISO/IEC 27001PCI-DSSFedRAMP
Hosted on premier AWS and Google Cloud data centers
Operational Controls & Threat Management
Security is embedded into our daily operational workflows and software development pipeline.
Identity & Access Management (IAM)
Multi-Factor Authentication (MFA) is strictly mandated for all Dhumi team members. We enforce the Principle of Least Privilege (PoLP)—internal engineering access to production environments is strictly gated, logged, and restricted to critical operational needs.
Continuous Vulnerability Monitoring
We utilize automated code-scanning tools across 100% of our code repositories to actively detect and remediate dependencies or vulnerabilities before code ever reaches production.
Secure Development Lifecycle (SDLC)
Our engineering team follows OWASP (Open Web Application Security Project) top 10 secure coding guidelines to prevent vulnerabilities like injection, cross-site scripting, and broken authentication.
Need More Details?
We are fully equipped to partner with your IT and InfoSec procurement teams. If your organization requires a comprehensive review of our active technical controls, infrastructure diagrams, or data processing agreements (DPA), please reach out to our security team.