Move sensitive data. Not your risk.
Your keys, your network rules, your region. DLH.io encrypts everything, hides the columns you choose, and connects the way your security team already approves.
Every sync
Encrypted from source to warehouse
- AES-256 at rest
- Your master key
- PII hashed in flight
- Purged after load
Audited
SOC 1 & SOC 2
Built in, not bolted on
Security and privacy controls on every pipeline
Customer-managed keys
Hold the master encryption key yourself. Revoke it and DLH.io can no longer decrypt your data.
Global support
We support every major cloud and warehouse worldwide. In the US, that includes AWS GovCloud.
Encrypted end to end
Data, keys, and credentials are encrypted in transit (TLS 1.2+) and at rest (AES-256), with secrets in an HSM-backed KMS.
Column blocking and hashing
Stop a column from replicating at all, or hash it so PII is anonymized before it lands but still works as a join key.
Connection methods
Connect the way your network rules allow
Add an encrypted hop through a host you control
DLH.io connects to a bastion host in your network over SSH, and only that host can reach the database. Nothing is exposed directly to the internet.
Best for: Cloud or on-prem databases where you already run a jump host.
SSH tunnel setup guideData residency
Keep data where your regulators expect it
Set the geography, cloud, and region for each destination. Its connectors follow automatically.
Choose the geography
Pick where data is processed for each destination and its connectors, such as the US or the EU.
Choose the cloud
Run processing on AWS, Google Cloud, or Azure to match the cloud you already trust.
Choose the region
Pin processing to a specific cloud region, including US GovCloud, per destination.
Compliance your auditors recognize
See our trust & compliance programSOC 1 & SOC 2
Audited controls for security and data handling.
HIPAA BAA
We sign a Business Associate Agreement.
PCI DSS
Compliant for pipelines that carry cardholder data.
GDPR
DPA with EU standard contractual clauses.
Need data processed inside your own network?
SQL Database Loader Agents run in your environment, next to your databases. You keep the data path; we run the platform, scheduling, and monitoring.
FAQ
Security questions, answered
More security questions? See our documentation
Our docs cover every control on this page in technical detail, plus setup guides for each connection method.
- Security overviewEncryption, retention, permissions, infrastructure, and policies in full detail.
- IP allowlistThe DLH.io addresses to allow through your firewall.
- SSH tunnel setupStep-by-step setup for databases behind a jump host.
- SQL Database Loader AgentsInstall and run the agents inside your own network.
- Column hashingAnonymize PII columns before they reach your destination.
- Support data accessGrant, limit, or revoke support access to your data.
Looking for audit reports or our compliance program? Visit Trust & compliance or request documents in the Trust Center.
Show us your security requirements
We'll map them to the right connection method, keys, and region, and walk your team through how DLH.io moves your data.