Security

Data is encrypted in transit with TLS 1.3 and at rest with AES-256.

On-device transcription means your raw audio never has to leave your machine.

We follow least-privilege access internally. Production access is audited and requires hardware-backed MFA.

Sync integrations use scoped, revocable tokens — Dicty never stores your third-party passwords.

Dicty runs on SOC 2-aligned cloud infrastructure with automated patching and continuous monitoring.

We maintain encrypted, regularly tested backups with defined recovery objectives.

Found a vulnerability? Email security@dicty.io. We acknowledge reports within 48 hours and will not pursue action against good-faith research.