Dash is built with a focus on security
Millions of customers trust Dropbox with their most important information. Our security foundations help us meet our commitment to maintain customer trust—today and in the future.

Dash has high security compliance standards
More than 700 million registered users all over the world trust Dropbox with their sensitive content and data. Dash is designed with the same focus on security.
SOC 2
We are proud to have successfully achieved SOC 2 Type II compliance, meeting the Trust Services Criteria for Security, underscoring our commitment to the protection of our clients' data.
GDPR
Dash adheres to the General Data Protection Regulation (GDPR).
CCPA
Dash is committed to safeguarding the security and privacy of our users’ data and is in compliance with CCPA.
EU - US DPF
Dropbox complies with the EU-U.S. and Swiss-U.S. Data Privacy Frameworks, as well as the UK Extension to the EU-U.S.
Built-in security controls to empower your teams
Data protection and encryption
Content stored from the Dash client or integrated applications is encrypted using FIPS 140-2, Level 3 cryptographic services via AWS Key Management Service (KMS), with key management processes handled by Dropbox.
Admin controls
Dash admins have full control and visibility over who has access to specific company content within source connectors at the individual document level in near real-time, and can batch update permissions for any amount of assets in seconds.
Strict permissions enforcement
With Dash, end-users only have access to the content they have permissions for across any given connector.
Authentication support
Dash supports authentication through your enterprise's identity provider, enabling the use of your existing SSO setup and ensuring secure account access with two-factor authentication.
Enterprise security controls
Dash combines the rigor of Dropbox’s maturity in security controls, risk assessments and 3rd party reviews to ensure your data is always secure.
Audit and activity logging
Full visibility into how Dash is being used in your environment with the ability to export logs for quick analysis or integrate with SIEM solutions for centralized monitoring and alerting.
Managed deployment
Setup is easy with simple standard deployment solutions in your environment for Windows, macOS clients and browser extensions.
Source sync, index & ingestion controls
Built-in syncing ensures your content stays aligned with source connectors while allowing you to stay informed with status notifications and controls over what Dash indexes and ingests.
Dropbox Dash Security
Dropbox Dash is AI-powered universal search that helps speed up the way you work across all your applications.
Trustworthy AI starts here
Dash is built and operated by Dropbox, leveraging more than 15 years of experience protecting data for over 575,000 teams around the world.
Dash gives you control over data access and integrations. You determine which apps are connected to Dash and can revoke access at any time. We will not build generative AI models using your content without consent. AI-generated answers include clear citations linked to original sources to ensure traceability and support auditability.
Lakera Guard's LLM firewall adds guardrails that help reduce prompt exploits, limit harmful content, and protect data upholding our AI principles.
Help Dash stay secure
If you believe you have found a security vulnerability in Dash's product offering, please submit your findings to our Vulnerability Disclosure program.
Supercharge your team with AI-powered universal search
.webp)