Security & Trust

How we handle your data and keep things secure.

Don't take our word for it — check these yourself.

Everything on this page is something a stranger can verify without contacting us. Nothing on this page is a badge we have not earned, because we hold no third-party certification and will not pretend otherwise.

Live, re-runnable checks

Run the tests yourself, right now

SSL Labs
Qualys SSL Server Test. Re-runs the TLS configuration of this domain and grades it.
Run the SSL Labs test→
Mozilla Observatory
Scores the security headers this site actually sends. Run it again yourself and read the result.
Check the security headers→
Sucuri SiteCheck
Malware and blacklist scan of the public site. Clean scans show the site was checked, not self-reported.
Scan the site→

Data isolation

Your instance. Your database.

Every client gets their own separate, self-hosted instance. We never pool your data with other clients. You control your own database, and you can export it whenever you want.

Payments

Payments are processed securely through Whop

whop

Card details are handled by Whop's checkout. DDi does not collect, store or see your card number, and this site is not the party certified for payment handling.

Report a problem

Security contact

If you find something wrong with this site or one of our products, email us directly. A human reads it and replies.

security@dullugroup.co.ke

The fine print, in plain English

Privacy and terms

Privacy policyTerms of service

Who is behind this

One person, named, on the record

There is no security team here, no trust page committee, and no invented authority language. DDi is built and run by one founder: Ian Dullu Jillo, self-funded, working from Kenya.

The honest version of trust for a company this size is the version you can check: real scores, real isolation, a real email, and a real name.

Read the About page →