DashForDevsDocs

Docs NewsAPI v1

dashfordevs.com Sign in

© 2026 DashForDevs

Docs News dashfordevs.com Legal Status

Docs SecurityCustomer Data

Getting Started

Analytics & Tracking

Billing & Subscriptions

Storefront Payments

Storefront Architecture

API Key Security CORS & Allowed Origins Webhook Signatures Customer Data Rate Limiting

Team & Permissions

Migrations & Import

Calendar & Appointments

Troubleshooting

CLI & Deployment

White-label Platforms

Platform Modules

Platform Security

Site Keys & Client Sites

Customer Data

How customer data is stored and encrypted.

Updated March 29, 2026

On this page

Data Protection
Data Access
Next Steps

Data Protection

All API communication uses HTTPS/TLS
Customer passwords are hashed with bcrypt
Payment data is tokenized — raw card numbers never stored
Access tokens expire after 24 hours
API keys can be rotated at any time

Data Access

On this page

Data Protection
Data Access
Next Steps

Customer data is only accessible with:

A valid Bearer token (customer's own data)
A secret key sk_* (admin access to all customers)

Public keys (pk_*) cannot access individual customer data.

Next Steps

API Key Security
Rate Limiting

PreviousWebhook Signatures NextRate Limiting

Customer Data