Security
Your clients, your hours, your calendar: safe.
You put your clients' and your team's data in it. Here's how Dowit handles that, and how it's built.
Isolated per workspace
- Every workspace is isolated in the database itself (row-level security in Postgres). Even a bug in the app can't show data from another workspace.
- Every request, from the app or from your AI, runs inside exactly one workspace.
- An automated test checks that every table with data is isolated.
Encrypted
- All connections use HTTPS (TLS).
- Storage and backups are encrypted by our hosting and database provider.
- Access to your Google Calendar is additionally encrypted (AES-256-GCM).
Login without passwords
- Dowit stores no passwords: you sign in with Google or with a link by e-mail.
- A login link works for fifteen minutes and only once.
- Limits per address and per IP against abuse.
Your AI only gets what you allow
- Connecting uses OAuth 2.1 with PKCE: you sign in and grant access, per workspace.
- Access tokens are only stored as a hash and expire on their own.
- You disconnect an app with one click in Settings.
Payments through Stripe
- Your card details go straight to Stripe; Dowit never sees them.
- VAT, invoices and cancelling are handled in Stripe's customer portal.
Your data stays yours
- No selling, no ads, and we train no AI models on what you enter.
- Download everything at any time (Settings → Backup).
- Deleting your account removes all your data right away; backups are gone within 30 days.
- Error logs are kept without e-mail addresses.
GDPR and where your data lives
Dowit is offered from Belgium and follows the GDPR. If you use Dowit for your business, our data processing agreement applies automatically. The app runs on Vercel and the database on Neon. They may also process data outside the EU, based on the European Commission's Standard Contractual Clauses. Which other parties are involved is in the privacy policy.
Found a security issue? Report it to hallo@dowit.io. We reply within two working days.
Plan your work by saying it.
Free for yourself, with no time limit. A team? Try it free for 14 days.