Trust Center
How client documents are protected, where they are stored, for how long, and who can access them.
Our clients trust us with sensitive transaction documents. This page sets out, without reservation, how those documents are protected, where they are stored, for how long, and who can access them. It is open to anyone, with no registration.
Where your data sits
Client documents are stored in the European Union, Ireland region, on AWS infrastructure. Data is encrypted at rest and in transit.
Who has access
Access is restricted to the analyst assigned to the case and to supervising staff. All access is logged. The client sees only their own case.
Technical controls
Mandatory two factor authentication, encryption, access logging, antivirus scanning of every submitted file and platform usage limits.
Chain of custody
Every uploaded file receives a SHA-256 integrity hash on arrival. Access and analysis steps are logged by date, time and named user. A custody record can be exported alongside the report.
Retention and deletion
Documents and case records are retained for 5 years after case closure. A client deletion request withdraws access immediately, while the restricted archive remains under legal hold until the retention period ends.
Subprocessors
Amazon Web Services, Ireland, provides hosting and storage infrastructure. This list is updated whenever a subprocessor with technical access to data changes.
Data processing agreement
The DDNC data processing agreement is available to download without registration.
Download DPAIncident notification
DDNC notifies the client within 48 hours from becoming aware of becoming aware of a security incident affecting client documents or data.
Security testing
No independent security-testing summary is currently published.
Certifications
No security certification is currently published. DDNC publishes certifications only when they are actually held, with certificate number and certifying body.
Service status
A public status page will be added when the client portal goes live.
Security contact
Security questions and vulnerability reports can be sent to info@ddnc.net.
Published upload limits
Uploads accept PDF, JPG, PNG, DOCX and XLSX. Each file is limited to 50 MB, with 20 files per submission.