Security

DWS Accessibility API includes security controls for production document workflows.

Encryption

The API protects data in transit and at rest:

• Data in transit is protected with HTTPS/TLS.
• Data at rest is encrypted in managed infrastructure.

Access control

Use token-based authentication to control API access:

• API access requires a valid bearer token.
• You manage token distribution and rotation from the dashboard.

Operational guidance

Use the practices below to reduce security risk in production:

• Use short-lived credentials and secure secret storage in your backend.
• Restrict who can create or rotate API credentials in your organization.
• Avoid exposing permanent keys in client-side code.