Overview
DDAS is committed to providing secure, reliable, and privacy‑respecting software solutions for industrial automation. This Security Statement explains how we protect customer data and how our software behaves in operational environments.
No Telemetry and No Data Collection
DDAS software libraries do not collect, transmit, or store any operational data from PLCs, controllers, or engineering systems. There is:
- no telemetry
- no cloud connection
- no remote reporting
- no hidden communication
All code runs entirely on the customer’s hardware.
No Cloud Dependencies
All DDAS libraries operate offline and do not require:
- internet access
- external servers
- cloud accounts
- remote APIs
This ensures maximum reliability and security in industrial environments.
Secure Website
Our website uses HTTPS encryption to protect all communication. It has no user accounts and does not set its own cookies. We do not sell online and do not process card payments: you order on the basis of a quote and pay by bank transfer. DDAS does not store credit card information.
Minimal Data Collection
We only collect the information necessary to:
- process orders
- deliver digital products
- provide support
- meet legal and tax requirements
We do not collect operational data, machine data, or usage metrics.
Data Storage and Protection
Customer and order data are stored in our own system, operated by DDAS; licence keys and access codes are stored encrypted. Project data for the CRA Compliance Service is used only to deliver the service and deleted no later than 30 days after delivery of the handover package (see our Privacy Policy). Protections include:
- encrypted connections
- access controls
- regular security updates
- secure hosting infrastructure
We do not store sensitive technical data about customer systems.
No Data Sharing
We do not sell or share customer data. Data is shared only with:
- our bank (payments by bank transfer)
- email delivery services
- infrastructure providers
All third parties follow strict security standards.
Customer Responsibilities
Customers are responsible for:
- securing their PLCs and engineering systems
- implementing network segmentation
- maintaining strong passwords
- controlling access to project files and libraries
DDAS software does not override or replace customer security practices.
Limitation of Liability
The customer is solely responsible for testing, validating, and verifying the correct functionality of the software within their specific application, environment, and safety requirements.
DDAS does not guarantee compatibility with any particular system configuration, and the customer must ensure that the software behaves as expected before deploying it in production or safety‑relevant systems.
Reporting Security Issues
If you believe you have discovered a security issue in a DDAS product or service, please report it to [email protected].
Our Coordinated Vulnerability Disclosure Policy explains what to include in your report and what you can expect from us: https://security.ddas.digital/policy.html. We confirm receipt within 5 business days and share an initial assessment within 10 business days.
Security advisories for DDAS products, also as machine-readable CSAF documents, are published at https://security.ddas.digital.
Our contact details for security researchers are also available at https://www.ddas.digital/.well-known/security.txt.
Security Updates
DDAS provides security updates for its libraries free of charge for all editions during the security support period: five years from the release of the version you purchased. The end date (month and year) is stated in the release notes and, for direct purchases, in your offer and license confirmation.
Security updates are delivered in the latest compatible version of your product line. Installing a security update does not extend your support period. DDAS libraries are never updated automatically; you decide when to install an update.
We inform customers about available security updates without undue delay. The details are set out in Section 9a of our License Agreement: https://www.ddas.digital/license-agreement.
Product Security Information
The security information for DDAS products required by the EU Cyber Resilience Act (support period, secure use, installing updates and decommissioning) is published at https://docs.ddas.digital/html/DDAS-Security-Information-en.html, in German at https://docs.ddas.digital/html/DDAS-Security-Information-de.html.
The EU declarations of conformity of DDAS products are published at https://conformity.ddas.digital.