Security at DataOrigin

Data Origin, S.L. is the company responsible for the DataOrigin platform. This includes the dataorigin.es website, the application at dataorigin.es/app, the API at api.dataorigin.es and the browser extension.

Security lead

Joaquín Montesinos, founder and CEO of DataOrigin, is the company's security lead. He leads the platform's security reviews and incident handling.

Security contact security@dataorigin.es

How we protect the platform

• We regularly review the platform's code and infrastructure to find and fix vulnerabilities.
• The server checks permissions on every request. Each user only accesses the data that belongs to them.
• We make encrypted backups of the database, check that they are valid and store them outside the platform's servers.
• The database is hosted in the European Union and we process personal data in line with the General Data Protection Regulation (GDPR). More information in our privacy policy.

How to report a vulnerability

If you find a security issue in DataOrigin, email us at security@dataorigin.es. Include a description of the issue, the steps to reproduce it and the impact you think it has. We will reply as soon as possible.

Please do not access other users' data, do not run tests that affect the service and do not publish the issue until we have fixed it.