Safety & Testing

We sent Dozzi to independent labs. Here are the reports.

We're Ben and Kim, two parents with three kids. We aren't a big company with a compliance department, so we did this part ourselves, the slow way. We sent the Dozzi Base to independent test labs, read every page that came back, and fixed what they found before we started selling.

Below is each lab test, what it covers in plain English, and the full report for you to download. That includes the one that didn't pass the first time.

Ben & Kim

Lab tests at a glance

Standard What it covers Lab Date Report Result
CPSIA §101 & §108
Lead and phthalates		 Checks the plastics, metal parts, sticker, cord, power adapter, warning tag and printed booklet for lead, and the cord's wire covering, the sticker and the warning tag for the phthalates regulated under CPSIA (chemicals used to soften plastic). Applied Technical Services (ATS), Marietta, GA June 11, 2026 ATS 485905
Download report (PDF) 		Passed
ASTM F2951-19 (2024)
Baby monitor safety standard, first test		 A voluntary ASTM safety standard written for baby monitors. It covers sharp points and edges, flammability, label permanence, cord-strangulation warnings, the tracking label, packaging, and the printed instructions. Tested by SGS North America, Fairfield, NJ; report issued by ATS Tested May 27 to June 8, 2026; report June 11, 2026 ATS 485905-1 (includes SGS 5459905-TL-01)
Download report (PDF) 		Two labelling findings
All other tested clauses passed
ASTM F2951-19 (2024)
Retest after fixes		 A re-check of the clauses that hadn't passed. SGS tested our revised box label on a new sample in July, and then evaluated our revised instructions (submitted as a PDF). Tested by SGS North America, Fairfield, NJ; report issued by ATS Tested July 6 to 17, 2026 (SGS revised Aug 14); ATS report August 17, 2026 ATS 485905-3 (includes SGS 5474457-TL-01-R1)
Download report (PDF) 		Passed
FCC Part 15, Subpart B, Class B
and Canada ICES-003, Class B		 Checks that the Base's electronics don't give off enough radio interference to disrupt other devices in a home, like TVs and radios. F2 Labs, Middlefield, OH Tested April 15, 2026; report April 23, 2026 F2 Labs F2X36614A-01E
Download report (PDF)
F2 Labs Certificate of Test, lab summary (PDF) 		In compliance

Each lab's results apply to the samples it tested. The ASTM reports cover the clauses that apply to Dozzi ("tested clauses only"); SGS did not perform clause 5.3, paint and surface coatings. Before posting the ATS reports, we removed our home street address from the cover pages and added a note saying so. That edit means the ATS digital signatures don't carry over to these copies; the signed originals are available on request. The F2 Labs files are posted exactly as issued.

The test we didn't pass the first time

In June, the ASTM F2951 test found two problems, both with labelling:

  • Tracking label: the product and its packaging didn't show our company's full address or phone number. (SGS marked this under both the standard and the CPSIA tracking-label section.)
  • Cleaning instructions: our printed instructions didn't tell you how to clean the Base.

Every other clause the lab tested passed, including sharp points and edges, flammability, label permanence and the cord-strangulation warnings.

So we fixed both. We added our company address to the box label, and we added a Care & Cleaning section to the printed quick-start guide. SGS retested a revised sample in July, and the instructions still needed changes, so we revised them again. The final report, issued August 17, 2026, passed. It re-checks the clauses that had failed and carries forward SGS's July results for the rest.

We're telling you this because we'd want to know. It's also a big part of why we test at all.

What these results mean, and what they don't

  • "Tested to" and "passed" are the accurate words. No government agency certified or approved Dozzi. The CPSC doesn't certify products, and ASTM publishes standards but doesn't certify products.
  • ASTM F2951 is voluntary. No U.S. law requires a baby monitor to meet it. We chose to test to it anyway.
  • Our FCC compliance is a Supplier's Declaration of Conformity. For this kind of device, the FCC process is for the maker to have the product tested and then declare that it complies. That's what we did, based on the F2 Labs report. It is not an FCC certification.
  • The wireless radio has its own FCC approval. The Base uses a pre-approved radio module that holds its own FCC ID, 2AC7Z-ESPS3WROOM1 (Canada IC 21098-ESPS3WROOM1). That approval belongs to the module's maker. It shows up on the Base's label as "Contains FCC ID".
  • Lab results describe the samples tested. Units we ship are built to the tested design, with the revised label and printed instructions.

Privacy and security, built in

Privacy

  • The audio stays in the room. Cry detection runs on the Dozzi Base itself. It sends small alert signals, not audio, and it doesn't record audio or video.
  • Your consent comes first. Dozzi asks for your explicit consent before collecting heart-rate, movement or sleep data from your Apple Watch.
  • Algorithm contribution is off by default. You can opt in, and change your mind any time.
  • Pseudonymized analytics. If you turn on Algorithm Contribution, we replace your Base's ID with a salted SHA-256 hash before analyzing the data. The salt is held only on our servers.
  • A dedicated consumer health data privacy policy, written for Washington's My Health My Data Act.
  • Delete your account any time, in the app or on our website, with clear timelines for what's kept and when it's removed.

Security

No connected device is perfectly secure, and we won't pretend otherwise. Here's what's built into every Dozzi Base sold to customers, and into the service behind it.

  • Secure Boot with RSA-3072 signatures. The Base's hardware verifies a cryptographic signature before it runs any code, so it runs only firmware we've signed. Our signing keys are kept in encrypted storage and are never present on the factory line.
  • Hardware flash encryption with a per-device key. The Base's firmware and stored settings, including your Wi-Fi password, are encrypted with AES-XTS using a key unique to that Base, held in read-protected eFuse on the chip. The chip's JTAG debug interface is permanently disabled in hardware at the factory.
  • Signed over-the-air updates with automatic rollback. Updates are delivered over TLS (HTTPS), and the Base verifies each update's signature before installing it. If new firmware can't start or can't reach our servers, the Base automatically reverts to its previous version.
  • A unique per-device secret. Each Base generates its own 256-bit secret on the chip. Our servers store only a SHA-256 fingerprint of it, never the secret itself.
  • No admin page or default password. The Base has no web admin page, no default password and no remote shell. The app talks to it directly over your home Wi-Fi, so keep your Wi-Fi password private.
  • Default-deny cloud access. Our database's security rules deny all access unless a rule explicitly allows it. In the app, only you and the caregivers you invite can access your household's data; limited Dozzi systems and staff can access it to run and support the service, as described in our Privacy Policy. Traffic to our servers is encrypted in transit with TLS.
  • Camera tokens encrypted with AES-256-GCM. If you link a Ring camera, its access token is encrypted before we store it, and the app can't read it back from our database.
  • Encrypted backups with automatic expiry. Weekly backups are encrypted at rest, deleted automatically after 8 weeks, and permanently purged within a further 7 days.
  • Critical Alerts, only if you allow them. Dozzi uses Apple's Critical Alerts permission, so an alert can come through Do Not Disturb and silent mode. You choose whether to turn it on.

Found a security issue? Email info@dozzisleep.com with "Security" in the subject line. We read every report and will get back to you.

What Dozzi is not

  • Dozzi is not a medical device. It listens for crying. It does not monitor breathing, heart rate, oxygen, movement, or any of your baby's vital signs, and it is not designed to detect, treat, prevent, or reduce the risk of SIDS, SUID, or any medical condition.
  • It doesn't replace you. Dozzi helps you respond, but it doesn't watch your baby for you. It is not a substitute for safe sleep practices, your pediatrician's advice, responsible adult supervision, or checking on your child in person.
  • Silence isn't an all-clear. Some emergencies make no sound. An alert means Dozzi heard your baby; a quiet night doesn't mean everything is okay.
  • No monitor can promise every alert arrives. Alerts depend on power, your home network and internet, your phone's settings, and your watch being charged and worn. Send yourself a test alert after anything changes.
  • Keep the cord away from the crib. Place the Base on a shelf or dresser, with the Base and its cord at least 3 feet (0.9 m) from any crib, bassinet or play yard. Never put it in or attach it to a crib.

Questions about our testing? Email info@dozzisleep.com. One of us will answer.

Launch pricing ends October 1.

Not ready to order today? Join the Night Shift — the families splitting the night fairly — and we'll remind you before launch pricing ends on October 1 and the price moves to $275.