Security at Dubable

    Your projects and data are protected by enterprise-grade security.

    How We Protect Your Data

    Security is foundational to everything we build at Dubable. From the moment you sign up to every line of code generated and every site published, we apply multiple layers of protection to ensure your data, projects, and credentials remain safe. Our infrastructure is built on industry-leading cloud providers with enterprise-grade safeguards.

    Encryption in Transit

    All data transmitted between your browser and Dubable is encrypted using TLS 1.3. Every connection is secure.

    Encryption at Rest

    Your project data, credentials, and personal information are encrypted at rest using AES-256 encryption.

    Authentication

    Multi-factor authentication, OAuth with Google and GitHub, and secure session management protect your account.

    UAE Data Residency

    Enterprise customers can opt for UAE-based data residency, ensuring your data stays within the country.

    Access Controls

    Role-based access controls for Business and Enterprise plans. Manage who can view, edit, and publish projects.

    Regular Audits

    We conduct regular security audits and vulnerability assessments to identify and address potential risks.

    Secure Payments

    All payments are processed through Stripe, a PCI DSS Level 1 certified payment processor. We never store your card details.

    DDoS Protection

    Our infrastructure includes DDoS mitigation to ensure your published sites remain available under attack.

    Backups

    Automatic daily backups of all project data with point-in-time recovery capabilities.

    Compliance

    Dubable is committed to meeting international security standards and UAE regulatory requirements.

    UAE Data Protection Law
    GDPR Awareness
    PCI DSS via Stripe
    SOC 2
    Coming 2026

    Responsible Disclosure

    Found a security vulnerability? We appreciate responsible disclosure.

    Email [email protected] with details. We aim to acknowledge reports within 24 hours and resolve critical issues within 72 hours.

    We do not pursue legal action against researchers who follow responsible disclosure practices.

    Security FAQ

    Questions about security? Contact our security team at [email protected]