Security

Della is an early pilot. We limit each deployment to an agreed workflow, protect administrative interfaces with authentication, validate provider webhooks, restrict browser access, and avoid logging request content by default. Access is limited to people who need it to operate and review the pilot.

Before launch, we test routing and escalation rules with the participating business. We monitor pilot calls and can disable the workflow if it behaves unexpectedly. Della is not intended to replace emergency services or a business’s responsible on-call staff.

We do not currently claim compliance certifications or support for medical data. Security requirements that go beyond the published pilot scope must be reviewed and agreed in writing before any sensitive information is processed.

If you believe you found a vulnerability, email security@hiredella.com with a description and steps to reproduce. Please do not access or alter other people’s data, disrupt the service, or publicly disclose the issue before we have had a reasonable opportunity to investigate.