Home / Security
Security at Doniastack
We hold your security data to the standard we help you meet.
You trust us with evidence of your controls and your gaps. The platform is built so that trust is earned, not assumed.
Multi-factor sign-in
Every account signs in with a password and a code from an authenticator app. Sensitive actions ask you to confirm it is you again.
Separated workspaces
Each company’s records live in its own workspace. One client can never see another’s data, and every request is checked against the workspace it belongs to.
Role-based access
People see only the modules and records their role allows. Consultants, client admins, members and auditors each have their own view.
Complete audit trail
Every change is recorded with who made it and when, so you can always see what happened and show it to an auditor.
Hosted on AWS
Doniastack runs on Amazon Web Services in the United States, served over HTTPS end to end, with a web application firewall in front of the platform.
Your data, exportable
Export everything your workspace holds at any time, in one file. Your data stays yours.
Vendor links that expire
Links sent to your vendors work once, expire on a date, and are stored only as a fingerprint.
Have a security question about Doniastack?
We are happy to answer your security team’s questions or complete your vendor questionnaire.
Get started
See where you stand in 30 minutes
Tell us which review or audit is in front of you. We'll walk you through the platform and map what readiness takes, with no obligation.