Information security

We help companies protect themselves, so we practice what we preach. These are the measures we use to safeguard the information entrusted to us.

How we protect information

• Encryption in transit: the entire site and CRM run on HTTPS (TLS) only.

• Protected passwords: never stored in plain text; they are stored using secure hashing algorithms.

• Least privilege: every team member accesses only what they need, with roles and permissions, and access is revoked as soon as it is no longer required.

• Site protection: content security policies, protection against automated submissions, and controls against abuse of forms and chat.

• Protected files: the documents you attach can only be downloaded through signed, time-limited links.

• Backups: database backups before every major change and on a regular basis.

• Updates: we keep systems and dependencies up to date, and we review code before release.

• Activity logs: we keep records of key changes to detect and clarify incidents.

• Vendors: we work with cloud and software providers with recognized security practices and confidentiality agreements.

Our team

Everyone with access to client information signs confidentiality commitments and receives training in security and the safe use of artificial intelligence.

If an incident occurs

We have a procedure in place to contain, investigate, and remediate security incidents. If personal data is affected, we report it to the Superintendence of Industry and Commerce and to the individuals involved when applicable, as required by Law 1581 of 2012.

Report a vulnerability

If you find a potential vulnerability in our site or systems, email us at contacto@da2group.com with the subject “Security” and a description so we can reproduce it. We ask that you:

• Do not access, modify, or delete other people's data.

• Do not affect service availability (no denial-of-service or load testing).

• Give us reasonable time to fix the issue before disclosing it publicly.

We respond within 5 business days and keep you informed about the fix. We appreciate reports made in good faith.

For companies

Want to bring this level of protection to your company? Explore our IT security service or book a free assessment. Last updated: October 24, 2026.