Security at Dan AI

Last updated: May 27, 2026

Dan AI is committed to protecting customer data and operating our service responsibly. This page summarizes the security practices we use to safeguard our application, infrastructure, and customer information.

Security Contact

For security questions or to report a vulnerability, contact security@meetdan.ai.

Data Protection

Dan AI uses encrypted connections for data in transit and relies on trusted cloud providers for encryption at rest. Customer data is stored and processed only in approved production systems.

Access Control

Access to company systems is limited to authorized personnel based on business need. Dan AI follows least-privilege access practices, uses multi-factor authentication where available, reviews access periodically, and removes access when it is no longer needed.

Application Security

Dan AI uses a secure development process for production changes. Code changes are reviewed through GitHub pull requests, automated checks are required before merge, and Vercel preview deployments are used to review changes before production release.

Environment Separation

Production and non-production environments are separated. Development and staging workflows use separate configuration and data resources from production.

Availability and Recovery

Dan AI uses managed cloud providers for application hosting, data storage, backups, and availability. We maintain business continuity and disaster recovery procedures for responding to major service disruptions.

Status Page

Current service availability is published at our status page: https://stats.uptimerobot.com/G7h1QqCMjs

Incident Response

Security events are triaged by Dan AI's security owner. When an incident affects customers, Dan AI will communicate relevant information and remediation steps through appropriate customer communication channels.

Vulnerability Reporting

If you believe you have found a security vulnerability, please email security@meetdan.ai with a description of the issue, reproduction steps, affected URLs or accounts, and any supporting evidence. We ask that researchers avoid accessing, modifying, deleting, or exfiltrating customer data.

Compliance

Dan AI maintains a security and compliance program aligned with SOC 2 principles. Our SOC 2 readiness work is in progress.