Security and how it works
Dooplik handles API credentials for production Odoo instances. Here is exactly what the tool does with them, what it writes into your databases, and what it does not keep. We display no certification we do not hold.
01Your API keys are encrypted at rest
Credentials for your instances are encrypted with AES-256-GCM before they are written to the database. The encryption key is derived per account from a master key, and the account identifier is used as associated data: a record moved to another account will not decrypt. Keys are decrypted in memory only, for the duration of a run, and are never copied to the target instance.
02Nothing to install on your instances
Dooplik is a fully external tool: it works through Odoo's external API, with the permissions of the user whose key you supply. No third-party module to deploy, no system access, no direct connection to your PostgreSQL database. That is what makes it usable on Odoo Online, where third-party modules cannot be installed.
03We do not keep your record content
Dooplik reads the structure and configuration of the source, writes it to the target, and keeps no copy. Record content passes through memory during the run. What remains afterwards is the execution log — technical object name, XML ID, status, error message where applicable — plus the volume counters that feed your quota.
04Re-running breaks nothing
Every propagated object is identified by its XML ID and found again by it on the next run, so Dooplik updates instead of duplicating. When an object fails because a dependency is not in place yet, it goes to quarantine and the engine retries it once the rest has been processed. Whatever still will not go through is reported rather than forced.
05Hosted in the European Union
The application and its database are hosted in the European Union. For the data your instances give us access to, Dooplik acts as a processor under the GDPR: we process it only to carry out the operations you trigger, never on our own account. A data processing agreement is available on request.
06What Dooplik writes into the target database
Only what you selected: modules to install, models, fields, views, access rights, actions, automations, menus, settings — and data if you ticked that step. Nothing is deleted on the target. Every write is logged with its status, and you leave with the full report in Excel, PDF or JSON.