How DingTalk Docs enables secure collaboration

As collaborative work and online documents become widely adopted and internet technology advances rapidly, convenience comes hand in hand with information security risks. Protecting information security has become a top priority for an increasing number of organizations. DingTalk Docs continues to invest in information security, providing robust protection for organizations of all sizes.

​

☔️ Comprehensive DingTalk security protection

👍 Independent security audits: The first in China to pass the SOC 2 privacy principle audit, covering the security, confidentiality, and privacy principles. 👍 Security system certifications: An enterprise-grade application product certified under ISO 27001:2013 and ISO 27018:2014 security frameworks. 👍 Level 3 classified protection: Certified under the national information system classified protection scheme, supervised by the Ministry of Public Security and issued by local public security authorities.

---

Enterprise keys protect data at national cryptographic standards Organization data is protected throughout the entire data security lifecycle using encryption and decryption technologies, reaching bank-grade encrypted storage standards. Data is transmitted in encrypted form based on the SSL/TLS protocol to ensure end-to-end network transmission security. Security defense system backed by real-time intrusion detection powered by big data Building on more than a decade of offensive and defensive security expertise from the Alibaba Group Security Department, DingTalk has independently developed a dynamic intrusion prevention system that monitors platform security in real time. It can detect active intrusion events within minutes and respond quickly to contain, mitigate, and trace incidents. Through the establishment of internal Blue Team and Red Team offensive-defensive exercises, intrusion detection and security emergency response capabilities are continually strengthened.

---

​

🤐 Use Drive confidential mode to strengthen document permissions and information security

When personal documents are shared externally, the document links are private by default. Save a document to Drive, open the target document, and click Share in the upper-right corner to access the document security settings.

A four-step approach to information security protection for DingTalk Docs within Drive

​

✍️ Permission settings and information security in Knowledge Base

You can apply tailored security settings to content of different types and confidentiality levels.

​

1. How to access the permission management console

• Access the settings console: On the document Home page, click [… More] in the lower-left corner, select Organization settings, and choose the organization. You will enter the permission management console where you can configure related permissions.

​

2. How to add, modify, or remove Knowledge Base member permissions

• Open a Knowledge Base and add members through entry points such as More settings and Members and permissions. You can configure, modify, or delete member permissions. Permission types include: Manage, Edit, View/Download, View only, and Remove permission.
• Note: Setting or removing Space member permissions through the methods below also grants or removes the corresponding permissions for all documents within the Space.

​

3. How to add, modify, or remove permissions for a single document in Knowledge Base

• To grant a member access to only a specific document within a Knowledge Base, open the document, click Share in the upper-right corner, click Manage permissions, and then click Add member to add members. You can also modify or remove permissions for members who already have access.

​

4. How employees can request Space document permissions

• When you open a document for which you do not have permission, you can request permission from the document Owner or the Space Admin, choosing from Edit, View/Download, or View only.

​

5. How to configure security watermarks for Knowledge Base

• To protect document content, Knowledge Base supports two security settings: display watermark and leak prevention. To configure them, go to More settings in the Knowledge Base, find Security settings, and enable the appropriate security features as needed.
• The watermark content is “Company name + Name + Last 4 digits of mobile number”.

​

📌 Summary of secure collaboration

DingTalk Docs offers comprehensive permission and security settings, with permissions that can be granted down to individual users. You can also grant permissions to departments and Group Chats. When new members join a department or group, the system automatically grants them the corresponding permissions.

---

Back to DingTalk Docs