dify is a Chinese company, we need to pay attention to information security! #7182

Closed
opened 2026-02-21 18:19:17 -05:00 by yindo · 3 comments
Owner

Originally created by @Prometheusxiao on GitHub (Dec 12, 2024).

Self Checks

  • This is only for bug report, if you would like to ask a question, please head to Discussions.
  • I have searched for existing issues search for existing issues, including closed ones.
  • I confirm that I am using English to submit this report (我已阅读并同意 Language Policy).
  • [FOR CHINESE USERS] 请务必使用英文提交 Issue,否则会被关闭。谢谢!:)
  • Please do not modify this template :) and fill in all the required fields.

Dify version

0.13.2

Cloud or Self Hosted

Self Hosted (Docker), Self Hosted (Source)

Steps to reproduce

dify is a Chinese company, we need to pay attention to information security!

✔️ Expected Behavior

dify is a Chinese company, we need to pay attention to information security!

Actual Behavior

dify is a Chinese company, we need to pay attention to information security!

Originally created by @Prometheusxiao on GitHub (Dec 12, 2024). ### Self Checks - [X] This is only for bug report, if you would like to ask a question, please head to [Discussions](https://github.com/langgenius/dify/discussions/categories/general). - [X] I have searched for existing issues [search for existing issues](https://github.com/langgenius/dify/issues), including closed ones. - [X] I confirm that I am using English to submit this report (我已阅读并同意 [Language Policy](https://github.com/langgenius/dify/issues/1542)). - [ ] [FOR CHINESE USERS] 请务必使用英文提交 Issue,否则会被关闭。谢谢!:) - [X] Please do not modify this template :) and fill in all the required fields. ### Dify version 0.13.2 ### Cloud or Self Hosted Self Hosted (Docker), Self Hosted (Source) ### Steps to reproduce dify is a Chinese company, we need to pay attention to information security! ### ✔️ Expected Behavior dify is a Chinese company, we need to pay attention to information security! ### ❌ Actual Behavior dify is a Chinese company, we need to pay attention to information security!
yindo closed this issue 2026-02-21 18:19:17 -05:00
Author
Owner

@crazywoola commented on GitHub (Dec 12, 2024):

https://docs.dify.ai/policies/agreement

Dify highly values your data security. Dify gets the SOC 2 Type 1 certified and in the window period of SOC 2 Type 2. Besides that, we are still in the process of getting ISO 27001 and GDPR certified.
For comprehensive information on Dify's security measures and protocols, please consult our official Security Policy at Dify Trust Center. Dify Trust Center should be considered the primary and authoritative source for security-related information.
Dify.AI's cloud services are hosted on AWS in the U.S. region. Only a very limited number of authorized personnel, after approval, can access user data. Additionally, our code is open-source on GitHub, so if you have security concerns about the cloud service, you can use the self-deployed version.
In the self-deployed version of Dify, there is only one instance where the Dify server is called, which is for checking the current version update API. This action must be triggered by an administrator in the backend. There are no other technologies that use remote servers, so you can use it securely.
If you still have concerns, you can protect your data by setting up firewalls and other security measures.

@crazywoola commented on GitHub (Dec 12, 2024): https://docs.dify.ai/policies/agreement > Dify highly values your data security. Dify gets the SOC 2 Type 1 certified and in the window period of SOC 2 Type 2. Besides that, we are still in the process of getting ISO 27001 and GDPR certified. For comprehensive information on Dify's security measures and protocols, please consult our official Security Policy at [Dify Trust Center](https://security.dify.ai/). Dify Trust Center should be considered the primary and authoritative source for security-related information. Dify.AI's cloud services are hosted on AWS in the U.S. region. Only a very limited number of authorized personnel, after approval, can access user data. Additionally, our code is open-source on GitHub, so if you have security concerns about the cloud service, you can use the self-deployed version. In the self-deployed version of Dify, there is only one instance where the Dify server is called, which is for checking the current version update API. This action must be triggered by an administrator in the backend. There are no other technologies that use remote servers, so you can use it securely. If you still have concerns, you can protect your data by setting up firewalls and other security measures.
Author
Owner

@crazywoola commented on GitHub (Dec 12, 2024):

Dify is the product of LangGenius,Inc., a company registered in the United States and headquartered in MOUNTAIN VIEW, CA.

@crazywoola commented on GitHub (Dec 12, 2024): Dify is the product of LangGenius,Inc., a company registered in the United States and headquartered in MOUNTAIN VIEW, CA.
Author
Owner

@lalakii commented on GitHub (Dec 13, 2024):

但愿你有朝一日能为你今日的所作所为感到羞耻。

@lalakii commented on GitHub (Dec 13, 2024): 但愿你有朝一日能为你今日的所作所为感到羞耻。
Sign in to join this conversation.
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: langgenius/dify#7182