HomeSecurity Architecture
Enterprise Security & Trust Infrastructure

Security Architecture

DizitalGini is engineered with bank-grade AES-256-GCM encryption, TLS 1.3 transport, stateless AI inference, and strict least-privilege OAuth scopes to ensure your sending reputation and data remain secure.

Audited: September 23, 2026•Operated by DATAi2i•Zero Inbound Processing
Data at Rest

AES-256-GCM Vaulted Storage

All sensitive third-party credentials — including Google OAuth refresh tokens, Microsoft Graph tokens, and SMTP App Passwords — are encrypted using AES-256-GCM with internally rotated cryptographic keys.

Data in Transit

TLS 1.3 Cryptographic Transport

100% of API communications between client browsers, DizitalGini microservices, and external mail providers strictly enforce TLS 1.3 with Perfect Forward Secrecy and rigorous HSTS policies.

AI Confidentiality

Ephemeral AI Memory Containers

AI prospect research and dual-copy generation pipelines run inside isolated, stateless memory instances. Lead dossiers and campaign copy are never stored in public LLM pools or used to train shared foundation models.

Access Control

Least Privilege Write-Only Scopes

Our OAuth integrations request the minimum necessary write-only permissions (gmail.send for Google, Mail.Send for Microsoft). We never request or possess read or manage access to your private inbox.

Data Separation

Strict Tenant Row Isolation

Database-level schema partitioning and row-level security isolate each customer organization's prospects, campaign templates, and metrics, preventing any cross-tenant data access.

Token Lifecycle

Immediate 1-Click Revocation

Disconnecting any connected mailbox instantly purges all stored OAuth tokens and credentials from active databases and memory caches, immediately halting any future dispatches.

Write-Only Least Privilege Guarantee

When you link a mailbox to DizitalGini (whether through Google OAuth, Microsoft Graph, or custom SMTP), our platform operates strictly on a write-only outbound basis:

  • We never request Gmail gmail.readonly or Microsoft Mail.Read.
  • We possess zero technical ability to read, browse, or index your private inbox or received correspondence.
  • We do not parse replies inside your inbox; our pipeline focuses exclusively on outbound intelligence, personalized copy creation, human approval gates, and outbound campaign dispatch.

Security Inquiries & Vulnerability Disclosure

If you have security questions or wish to report a vulnerability, please reach out directly to our dedicated security desk:

security@datai2i.com•PGP Key available upon request•Target response time: < 12 hours