Terms of Service – Dalip.ai
Last updated: 23.4.2026
Our Commitment to Security
At Dalip.ai, we understand that you trust us with sensitive information about your team and your conversations. We take this responsibility seriously and have built security into every layer of our platform.
Dalip.ai is ISO/IEC 27001:2022 certified — the internationally recognized standard for information security management. It means security isn’t just a claim we make: it’s independently verified, continuously monitored, and audited every year.
Data Protection
Encryption
State
Standard
Data at rest
AES-256 encryption
Data in transit
TLS 1.2 or higher
All customer data is encrypted both when stored and when transmitted between your browser and our servers.
Data Isolation
Each customer’s data is logically isolated. Meeting notes, pulse updates, action items, and all other relationship-scoped data are accessible only to the authorized participants within each specific manager–employee relationship.
Data Residency
Primary data storage and core application processing occur within the EEA. Certain subprocessors located outside the EEA may process limited data for specific purposes (e.g. AI analysis, notifications), safeguarded by Standard Contractual Clauses and additional technical measures.
Infrastructure Security
Cloud Infrastructure
We host our services on industry-leading cloud providers that maintain:
- SOC 2 Type II certification
- ISO 27001 certification
- Physical security controls including 24/7 monitoring
Network Security
- Web Application Firewall (WAF) protection
- DDoS mitigation
- Regular vulnerability scanning
- Firewall-based threat detection and traffic monitoring
Access Control
Authentication
- Single Sign-On (SSO) support via Google and Microsoft
- Multi-Factor Authentication (MFA) available through SSO providers
- Secure session management
Authorization
- Role-based access control (RBAC)
- Attribute-Based Access Control (ABAC) for relationship-scoped data isolation (users only see meetings they participate in).
- Principle of least privilege
Compliance & Privacy
GDPR
Dalip.ai is fully committed to GDPR compliance:
- Lawful basis for all data processing
- Data minimization principles
- Data subject rights honored (access, deletion, portability)
- 72-hour breach notification commitment
- Data Processing Agreements available for all customers
Vendor Management
We carefully assess all third-party vendors that process customer data. Our Subprocessor List provides transparency into which vendors we use and for what purposes.
Incident Response
We maintain a documented incident response plan that includes:
- 24/7 monitoring and alerting
- Defined escalation procedures
- Customer notification within 72 hours for data breaches (per GDPR)
- Post-incident review and improvement
Security Practices
Secure Development
- Security requirements in design phase
- Code review for all changes
- Dependency vulnerability scanning
- Regular security testing
Employee Security
- Security awareness training
- Strict access controls based on job function
- Confidentiality agreements
Your Security Controls
As a Dalip.ai customer, you can:
- Enable SSO for your organization
- Enforce MFA through your identity provider
- Delete your account and data upon request
Certifications & Frameworks
Dalip.ai aligns with recognized security frameworks:
Contact
For security questions or to report a vulnerability:
Email: support@dalip.ai
For privacy-related inquiries:
Email: privacy@dalip.ai