Your documents, handled with care.
Here's how dojobase stores and processes your data — the protections every workspace gets, and the stricter single-vendor boundary you can turn on for regulated work.
In every workspace
Baseline protections that apply to every account, on every plan.
Private object storage
Documents live in a private AWS S3 bucket with public access blocked. References are internal object keys, not public URLs — there's no directly-loadable link, and every read is server-mediated and short-lived.
Encrypted in transit & at rest
Traffic is TLS end-to-end. Stored objects are encrypted at rest by the storage layer. Credentials and any customer-provided API keys are encrypted before they're persisted.
Redact before AI sees it
Detect-and-redact nodes can strip names, dates of birth, account numbers, and other sensitive fields out of a document before any model reads it — so the model only ever sees what the task needs.
Not sold, not used to train
Your documents are never sold, and they aren't used to train third-party AI models. We process them to run your workflow — nothing else.
A single-vendor data boundary
For financial or health data, turn this on per account and the entire document pipeline is pinned to AWS — the AI, the OCR, and the storage.
One AWS boundary
Every AI step — extraction, classification, analysis, AI review, PII detection, translation, summarization — runs on AWS only. Your documents are never sent to a third-party AI provider.
Under a signed AWS BAA
Processing runs on HIPAA-eligible AWS services (Bedrock, Textract, S3) under our executed Business Associate Agreement with AWS.
Fail-closed
If the boundary can't be guaranteed for a document, the job stops. It never silently falls back to a service outside the agreement.
No off-boundary capture
In this mode, OpenAI-backed nodes are disabled and your documents are never captured into any offline tuning or model-authoring process. What runs, runs on AWS; nothing is set aside.
Built around your requirements
Regulated-workload mode is enabled per account and purpose-built for sensitive data — a single-vendor AWS boundary on HIPAA-eligible services, backed by our signed Business Associate Agreement with AWS and a BAA between dojobase and your organization.
Every deployment is a conversation. Tell us what your security team needs — sub-processors, data retention, access controls, a DPA — and we'll align the setup to your requirements and support your review end to end.