Security and your test data
How ChargerDojo protects stored credentials, controls report sharing and handles data requests.
What we store and how
Partner tokens
Stored OCPI partner tokens are encrypted at rest with AES-256-GCM.
API keys
We store a SHA-256 hash and a display prefix, never the full API key. Copy the key when you create it.
Saved evidence
Reports scrub recognized credential fields and known held-token echoes. Older reports may predate the current redaction rules. Review the saved evidence before sharing. The sharing guide explains the limits.
Who can read a report
A shared report is readable by anyone holding its link.
Revoke or delete
Revoke the share link to end access. Deleting the report also removes access.
When a plan ends
A link to a report about your own endpoint stops working when the plan permitting it ends. Sandbox reports do not need a paid plan to share.
Account deletion
Deleting your account revokes every report link you made and links to reports you created, even when your organisation keeps the report.
How long data is kept
Reports expire according to the plan's retention window. A share link cannot outlive the report's retention deadline.
Read current plan termsPrivacy and data requests
For a procurement question, a privacy request or help deleting your account, write to support@chargerdojo.com.
Last reviewed