Access and isolation
- Authenticated workspaces and role-aware access controls.
- Organization-scoped application data and administrative controls.
- Credential and secret handling designed to keep provider keys out of public interfaces.
Application protection
- Input validation and authorization checks on protected operations.
- Signed integration patterns and auditable operational events where supported.
- Dependency, error, and abuse monitoring as part of ongoing platform operations.
Customer responsibilities
Security is shared. Customers should use strong authentication, limit administrator access, rotate integration credentials, review call and workflow permissions, and avoid placing unnecessary sensitive data in prompts or knowledge sources.
Report a concern
Email sales@dazcall.com with “Security Report” in the subject line. We welcome good-faith reports and ask researchers to avoid privacy violations, service disruption, and accessing data beyond what is necessary to demonstrate an issue.