You're trusting us with processor credentials.
We built for that.

DisputeDash connects to your payment processors, your store, and your evidence. That makes security the product, not a feature. Here is exactly how your data is protected — no vague reassurances.

How your data is protected

Every practice below is live in production today.

AES-256 encryption for every credential

Processor API keys, store tokens, and webhook secrets are encrypted with AES-256-GCM before they're stored. Tampered ciphertexts fail hard — there is no silent fallback.

Two-factor authentication — mandatory

Every account requires TOTP two-factor authentication at setup. Not optional, not a plan feature — every user, every workspace. Failed attempts are rate-limited and locked out.

Strict tenant isolation

Every workspace's data is logically isolated at the query layer — every data access is scoped to your workspace. Cross-tenant access is impossible by design, and we audit for it.

Webhook signature verification

Every incoming processor webhook is cryptographically verified against your credentials before anything is processed. Forged events are rejected, using timing-safe comparisons.

Complete audit trail

Every action — human or system — is logged with actor, timestamp, and detail: what evidence was gathered, who submitted what, when. Searchable, retained long-term, yours.

Role-based access

Admin, Reviewer, and Viewer roles limit what each teammate can see and do. Sessions are stored as hashes and expire automatically; passwords are bcrypt-hashed.

Encrypted in transit and at rest

TLS on every connection, HSTS enforced, evidence files stored in encrypted cloud object storage with access-controlled, expiring download links.

Least-privilege keys

We help you configure restricted API keys during onboarding — Stripe restricted keys, Braintree role-limited users — so DisputeDash can only do dispute work, nothing else.

SOC 2 Type I — coming soon

SOC 2 Type I is coming soon. Enterprise plans include a data processing agreement, SSO/SAML, and support for your security review process.

What we store — and what we never do

DataHow it's handled
Processor credentialsAES-256-GCM encrypted at rest; decrypted only in memory, on demand, for dispute operations
Store / checkout tokensAES-256-GCM encrypted at rest, per brand
Dispute & order dataStored per workspace, tenant-isolated, used only to build your evidence
Evidence files (PDFs)Encrypted object storage; served via expiring, access-checked links
Passwordsbcrypt-hashed — never stored or logged in plaintext
SessionsStored as SHA-256 hashes; expire automatically; revocable

What we never do

  • Store full card numbers — we only ever see what your processor shares (card network and last four digits)
  • Sell, share, or mine your dispute data — your data funds no side business
  • Take actions outside dispute management with your processor credentials
  • Hold your data hostage — export any time, and your BigQuery warehouse copy is yours forever

Found a vulnerability?

We welcome responsible disclosure. Report security issues to security@disputedash.com and we'll acknowledge within one business day. Please give us reasonable time to remediate before public disclosure.

Questions your security team will ask?

We're happy to walk through architecture, key handling, and data flows on a call — or answer a security questionnaire directly.

Talk to us