dash-b · Features · Security & VPN
A dashboard that answers only to your team.
Every Team seat includes the VPN. Turn it on and the board stops being reachable from anywhere else — not by a password that can be forwarded, but by the address the request comes from.
How the gate works
The address is the key
Your team gets a dedicated public address of its own in each region it uses. A dashboard set to require it will answer requests coming from that address and refuse everything else.
There is nothing to leak.
A screenshot of the link gets a stranger nowhere, because the link was never the credential. Somebody who forwards it to the wrong person has forwarded a door that will not open for them.
Every region our host runs, and each device belongs to one of them: Amsterdam, Chicago, Copenhagen, Frankfurt, Helsinki, London, Madrid, New York, San Jose, Singapore, Stavanger, Stockholm, Sydney and Warsaw. Seats, devices and regions are all things you change yourself, from your own account page, when the team changes.
What we do not do
Four things worth checking before you trust anyone
Your database is read-only
Nothing dash-b does can write to your production data, because the connection was never given the ability to. This is not a permission you have to remember to set.
Client keys never leave the device
A device's private key is generated on that device and stays there. The system that hands out VPN configuration has never held one and has no way to ask for it.
Teammates are not on your network
Being on the same team VPN does not put you on the same network as your colleagues' laptops. Traffic between members is off, and there is no setting that turns it on.
The export has no server in it
The strongest privacy answer is the one on the next page: take the whole designer and run it yourself, with nothing reporting anywhere.
Plainly
What we are not claiming
dash-b is a young product. There is no certification to show you, no third-party audit to link to, and no uptime guarantee written into a contract. Every statement on this page describes how the software behaves today, and nothing on it describes a process we have not built.
If a compliance requirement needs more than that, the honest answer is self-hosting: run the whole thing inside your own boundary and the question stops being about us.
Team is from €6 a seat, from two seats up.
The VPN is part of the seat, not an add-on with its own price. It is a castomo product in its own right, and it lives at vpn.castomo.com.