Security and privacy
Private by design, and honest about the edges.
This page lists what Duzenio does to protect your team's data, in plain terms, and then lists what it does not yet do. Both lists are kept current.
Encryption per organization
Chat messages, notes, ticket descriptions and comments, project documents, client contact details, invoice notes and other sensitive text are encrypted with a key that belongs to your organization before they are stored. One organization's key never touches another's data. AI provider keys and push notification tokens are encrypted too.
Passwords
Hashed with argon2id, the current recommendation for password storage. At sign-up, a password is checked against known breached passwords and refused if it appears in one.
Sessions and devices
Signing out takes effect immediately on every device. You can see which devices are signed in to your account and revoke any of them.
Files
Everything uploaded — in chat, on tickets, in notes and documents — is private and never publicly reachable. Every download goes through a short-lived link tied to the signed-in session that requested it. Large files up to 700 MB are uploaded in resumable parts.
Roles and permissions
Four roles — Owner, Administration, Project Manager and Employee — decide what each person sees and can do. Clients invited to the portal see their projects and nothing else.
Backups
Nightly backups, encrypted.
Screenshot monitoring is opt-in
Off by default. An organization switches it on; the desktop app then captures only while someone is clocked in, records the reason for any gap, and purges captures after the retention period the organization sets.
AI on your own key
AI features call the provider you connect — Anthropic, OpenAI or Google — with your own key. Duzenio does not route your data through its own AI account and does not resell usage.
What we don't claim
Not yet, and we'd rather say so.
- End-to-end encryption. Data is encrypted at rest with your organization's key; the service decrypts it to serve the app.
- SOC 2 or ISO 27001 certification.
- Two-factor authentication or sign-in with Google. Not available yet.
Questions or a report
Found something? Email info@duzenio.com. For how personal data is handled, see the Privacy Policy.
Start with three seats. Free, no card.
Projects, chat, time tracking, time off and invoicing for your whole team — on one login and, when you grow, one bill.