Your members' money and data, protected by default.
Encryption, isolation, backups and audit logs on every tier. Documentation and a DPA available on request.
Encryption
TLS 1.3 in transit, AES-256 at rest. Secrets in a managed KMS, never in code.
Tenant isolation
Row-level tenancy with per-tenant encryption keys and optional dedicated databases on Enterprise.
Backups
Point-in-time recovery for 35 days, daily snapshots retained 1 year, restore drills quarterly.
Payments
Card data never touches DIRSL. Gateways are PCI-DSS Level 1; we store tokens only.
Uptime
99.9% SLA on Growth, 99.95% on Enterprise, with public status page and incident history.
Access control
Role-based permissions, SSO for admins, 2FA enforced, audit log of every action.
Compliance
GDPR-ready with DPA on request. SOC 2 Type II in progress, report expected Q3 2027.
Responsible disclosure
security@dirsl.com. We acknowledge within 48 hours and credit researchers.
Shared responsibility
DIRSL secures the platform, infrastructure and data at rest. You secure your admin accounts (2FA is enforced), your payment-gateway credentials and your plan's legality. Members secure their own logins with optional 2FA and biometrics in the app.