Dragonboat
Enterprise-Grade Security
Protecting your product strategies and plans is our highest priority. That’s why we adopt world-class security and compliance best practices
SOC 2 Type 2 Certified
Dragonboat maintains an active SOC 2 Type 2 certification to ensure the security, availability, processing integrity, confidentiality, and privacy of our customers’ data.
Reports are available upon request.
Join thousands of product leaders who trust Dragonboat
“With Dragonboat, which we’re using at Toyota, we can keep aligned with the broader strategy and leverage different views to answer questions from the CFO and CEO. Instead of spending 40% of our time pulling reports, we can use Dragonboat to solve these things.”
Vanessa Garber
CPO Global Mobile Apps at Toyota
Security Built for Enterprise Needs
GDPR Compliant
Dragonboat complies with the General Data Protection Regulation (GDPR) for your data protection and privacy. More details on GDPR can be found here.
End-to-end Encryption
All your data is securely encrypted in transit via TLS and at rest using AES-256 bit encryption.
Vulnerability Testing
Dragonboat undergoes regular vulnerability tests both internally and via leading external auditors.
Automated Backup
System and data is automatically backed up on a daily basis. A data retention policy is in place.
Secure Hosting with AWS
Dragonboat is hosted at Amazon Web Services for scalable enterprise security. In addition, we have implemented additional security features, including firewalls, system monitoring and alerts.
Authentication
Dragonboat supports two-factor authentication (2FA) and single sign-on (SSO) via Google, Microsoft Entra ID, and Okta.
*Support for Microsoft Entra ID and Okta is only provided on Dragonboat’s Enterprise plan.
Application Security
Access to each workspace is restricted to signed-in users on a per user per account basis. Integration with 3rd party systems e.g. Jira is at per user per account basis.
Changes are logged in history which can be searched for review.
Internal Control
Dragonboat follows industry standard product development life cycle best practices. The engineering team follows the Open Web Application Security Project (OWASP) to develop the secure application.
Role-based access control is in place across all functions.