Can MFA be used to authenticate admin access for managing DayOne?

No, MFA should be disabled for admin access to the DayOne portal

Has the application been tested for vulnerabilities (e.g. OWASP)?

No. However, please note that DayOne does not require to be accessed from the internet

Does the app store any data “locally” in its own data store?

We store only configuration settings and sync objects’ GUID

Is any local data storage encrypted?

DayOne is based on Windows Server, hence you can encrypt the disk holding the DB using Bitlocker for example.

Is data in transit encrypted end-to-end?

Yes, all traffic is based on HTTPS (443)

What’s the maximum age of data stored locally?

As long as objects are synched using DayOne (only) their object GUID is stored in the app’s DB

How does the application handle race conditions? (Are Bi-directional update allowed?)

There is no such scenario

Has the application ever been functionally tested in a failover configuration?

Not yet

Support form

Comments

Thank you! Your submission has been received!

Oops! Something went wrong while submitting the form.

How can we help you?