How Dilix handles your data.
Diligence data is sensitive by nature. Here's exactly where it lives, how it's protected, and who touches it.
Data stays close to home.
Compute, database, and document storage run on Google Cloud, Zurich. Documents are additionally encrypted at the application layer before they're written to storage.
Document extraction and the conversational setup agent run on Vertex AI (Gemini).
Background job orchestration (Inngest) is limited to project, document, and user IDs only — never names, emails, or document content.
Security by default, not an add-on.
Scoped by role and organization.
Access follows role-based scoping and organization membership. Login via OAuth (Microsoft Entra ID, Google) or passkeys. Encryption keys are scoped per project via Google Cloud KMS and Secret Manager.
Encrypted at rest and in transit.
Documents are encrypted at the application layer (AES-256-GCM) before storage. All traffic runs over HTTPS/TLS, and database connections are encrypted at the instance level.
Backed up, redundant by design.
Automated backups with point-in-time recovery, retained for 7 days. Compute and database run on managed, redundant Google Cloud infrastructure.
Every access, logged.
Login sessions and product usage are logged per user. Every disclosure to a subprocessor is logged. Attacks are detected and filtered at the network edge.
Who else touches the data.
| Subprocessor | Region | Purpose |
|---|---|---|
| Google Cloud EMEA Limited | Zurich, Switzerland | Cloud hosting — compute, database, file storage, key management. |
| Google Cloud EMEA Limited | Netherlands | Vertex AI (Gemini) — document extraction and the conversational setup agent. |
| Microsoft Ireland Operations Limited | Ireland | Microsoft Entra ID — OAuth login. |
| Google Ireland Limited | Ireland | Google OAuth — login. |
| Inngest Inc. | United States | Workflow orchestration — job identifiers only, no personal data or document content. |
Where we stand today.
Dilix is built to be GDPR and Swiss nFADP aligned from day one, with Swiss data residency by default. Our security program is tracked continuously through Drata, and we are actively in the SOC 2 certification process.