Security

Your data is encrypted both in transit and at rest:

• All communication between your browser and our servers uses TLS (HTTPS).
• Databases and stored files are encrypted at rest in managed cloud infrastructure.

• Passwords are never stored in plain text — they are securely hashed.
• Sessions are managed with short-lived tokens.
• Sign in with Google is supported via trusted OAuth providers.
• Password recovery and verification flows protect account access.

• Role-based access (RBAC) limits administrative actions to authorized users.
• Each user can only view and manage their own information.
• Employee access to infrastructure is strictly limited.

To help your trusted contacts access your devices, you may choose to store device unlock codes (PIN, pattern, or password) within your account.

• Encrypted in transit (TLS) and at rest in our managed database.
• Visible only to you — isolated per user account.
• Never shared without your authorization.

This information is:

Dyonda does not store passwords for your online accounts (email, social media, banking, etc.).

Information about your trusted contacts is stored only to help you manage your digital legacy.

Dyonda never contacts your trusted contacts without your explicit authorization.

All payments are processed securely by Stripe, a PCI-DSS compliant provider.

Dyonda never sees, handles, or stores your card details.

We rely on trusted, industry-leading providers for:

• Cloud hosting
• Email delivery
• Authentication
• Payments

Each provider maintains its own security and compliance programs.

We recommend a few simple practices to keep your account safe:

• Use a unique, strong password.
• Do not share your login details.
• Keep at least one trusted contact up to date.
• Review your information annually.

If you believe you have found a security issue, please contact us responsibly at: