Trust & Security

Where your data lives

WorkDNA runs on infrastructure in the Thailand region so personal data stays in-country and supports local data-residency expectations. Backups are nightly compressed snapshots stored on the production server, pruned to a fixed number of recent copies and restore-tested; encrypted off-site copies are on the roadmap.

PDPA & privacy by design

• We operate under Thailand's PDPA: a lawful basis for every processing activity, and consent where it's required.
• Data-subject rights — access, correction, deletion, and portability — are supported on request.
• Personal data is never sold or rented.
• Privacy controls are built into the product, not bolted on.

Sub-processors

• Cloud hosting & managed database — Thailand region.
• Transactional email delivery (account and notification emails only).
• Error monitoring — diagnostics only, no personal content.
• AI providers — used only for optional narrative and coaching text; your data is not used to train third-party models and never drives an automated decision about a person.

How we protect your data

• Encryption in transit (TLS); sensitive fields are encrypted at rest with field-level encryption.
• Tenant isolation enforced in the database via row-level security.
• Least-privilege access with audit logging.
• Login lockout, refresh-token revocation, and scoped API keys.
• A lightweight security review runs before each release.

Responsible AI

Scores are computed deterministically from explicit signals; AI only explains or coaches. We never reduce a person to a single replacement score, and we do not run hidden surveillance — no keystroke or screen tracking.

SOC 2 & ongoing assurance

We are working toward SOC 2 Type II. This page describes our current posture honestly and is not, by itself, a certification claim — we will link the report here once available.

Your rights & contact

To exercise your data-subject rights or raise a security concern, contact [email protected]. We respond within the timelines required by the PDPA.