Security

How we approach protecting your data and our systems.

Infrastructure

DONNA runs on modern cloud infrastructure with encrypted transport (HTTPS), managed access controls, and isolated environments for production workloads. Vendor services are configured following least-privilege principles.

Authentication & access

Member access uses industry-standard authentication. Administrative access is limited, logged, and reviewed as appropriate for the product stage. Secrets and keys are stored in secure environment configuration—not in source code.

Reporting issues

If you believe you have found a security vulnerability, please email info@bemdonna.com with a concise description and steps to reproduce. We appreciate responsible disclosure.

Last updated: April 19, 2026