Alice

Security Overview

At DDG, we recognize that data is your most valuable asset and the foundation of your proprietary AI models. We treat your training data, source materials, and intellectual property with enterprise-grade security. Our comprehensive security framework ensures strict data protection, workforce isolation, and absolute confidentiality at every stage of the data labeling lifecycle.1. Architectural & Cloud SecurityYour data is securely ingested, processed, and stored using industry-standard infrastructure practices.Encryption in Transit & at Rest: All data transferred to DDG is encrypted in transit using TLS 1.3 and encrypted at rest using AES-256 bit encryption.Isolated Project Environments: Customer datasets are strictly segregated in isolated logical partitions to prevent cross-contamination.Zero-Retention Processing: We support secure streaming architectures where data is rendered temporarily to annotators and never cached on localized servers.2. Distributed Workforce Control (Human-in-the-Loop Security)Because DDG manages a distributed human workforce, we enforce rigorous endpoint and operational controls to eliminate data leakage.Strict Confidentiality (NDAs): Every member of our managed human resource pool undergoes identity verification and signs legally binding Non-Disclosure Agreements (NDAs).Role-Based Access Control (RBAC): Labelers only see the specific micro-tasks assigned to them. They have zero visibility into full, aggregated customer datasets.Secure Environment Constraints: Labeling is conducted through proprietary, sandboxed web interfaces. We strictly disable the ability to download, copy, screenshot, or print data assets.Watermarking & Auditor Tracking: Source materials can be dynamically watermarked with tracking pixels. Every interaction is logged for auditing purposes.3. Compliance & GovernanceWe align our internal workflows with international security frameworks to give our enterprise clients peace of mind.Standard Alignment: We design our policies to comply with ISO/IEC 27001 standards and SOC 2 Type II controls.Privacy Compliance: Our global data distribution models are fully compliant with GDPR, CCPA, and regional data privacy laws.Data Sanitization: Upon project completion and client sign-off, all customer data is permanently and securely purged from our active processing pipelines according to NIST guidelines.