Security and controls

An agent that asks first.

Doyen does real work on your firm's records, so the interesting question is not what it can do — it is what it cannot do without you. These are the controls, stated plainly enough to check.

Separation

Your firm's records are only your firm's

Every record belongs to exactly one firm, and access is enforced in the database itself rather than by the screen you happen to be looking at. One firm's roster, deals, calendar and discoveries are not readable by another, and a saying-no to a prospect affects only the board of the person who said it.

Confirmation

A person approves anything that leaves the building

Outbound actions — an approach, an offer, an email, a change to someone's record — are drafted by the agent and held until a human confirms them. Where a message is sent on your behalf, you see the actual message, editable, before it goes.

Receipts

What was done, by whom, and when

Actions write an audit receipt with the acting account, the affected record and the timestamp. Where an agent took a step on your behalf, the receipt says so.

Provenance

Every claim shows its source

Profiles, relationships and contact routes carry a source, a confidence tier and the date they were last verified. Where something cannot be evidenced it is withheld, not softened — a prospect with an unverifiable contact path is held back rather than shown to you with a gap in it.

The scouting desk specifically

Limits on how people are discovered.

Adults only

Discovery excludes anyone showing positive indication of being under eighteen — a stated age, a school-year signal, an explicit indicator. Doyen recruits adults.

No biometric identification in discovery

Prospects are found and identified from what they have themselves published — their name, their words, their public work. The desk does not identify a person by their face.

No contact without your firm

The desk never messages, follows, comments on or invites a discovered person. Every approach is made by your team, in your name, at your decision.

A no is respected

Turning a prospect down removes them from your board and stops them coming back around. A person who asks to be removed is removed.

Honest about the rest

What we do not claim.

Doyen does not hold a SOC 2 report, an ISO certification or any third-party security attestation today, and this page will say so until that changes. We would rather you check the controls above against the product than take a badge on trust.

If your firm has a security review process, send it to info@doyenos.com and we will answer it directly rather than pointing you at a trust portal.