Privacy
Your data, your privacy.
Dino tests your APIs. It never stores your production data, never trains on your results, and never shares your findings. Here's exactly how.
Your data stays yours.
Dino sends test requests and validates responses. It never reads, copies, or stores your production data. Scan results stay on your machine with the CLI, or encrypted in your regional database with Dino Cloud. Your API data is never used to train AI models, ours or anyone else's.
You stay in control.
Export your full workspace anytime, delete it whenever you want, and choose exactly what telemetry you share. Your scan results and API data belong to you, and we make it easy to take them with you or remove them entirely.
Stay compliant by design.
Keep your data in a boundary you control, and prove it to auditors.
Data residency
Pin your data to a region. Available on every plan. Multi-region for global teams.
Never trained on
Encrypted in transit and at rest. Never used for training. BYOK available.
Full audit trail
79 auditable action types. Every action logged. Exportable.
SOC 2
Controls and reporting for Enterprise plans.
Privacy, in plain English.
We don't track you.
No analytics cookies on the CLI. Console telemetry is opt-in: off, crash-only, or all. You choose.
We don't sell your data.
Not to advertisers, not to partners, not to anyone. Your scan results and API data belong to you.
We don't train on your data.
Your API data, scan results, and Dojo conversations are never used to train AI models. BYOK users' prompts go directly to their provider; we never see them.
You can export everything.
GDPR Article 20 compliant. Full workspace export, anytime.
You can delete everything.
When you delete your workspace, we delete your data. No 90-day holds.
Questions about privacy? privacy@usedino.dev
Questions about your data?
For general inquiries, contact us →