Scaling Secure, Data-Driven Campaigns with Copilot: How DBC Launched Ditto

Turning Raw Data into Scalable Campaigns—Securely

After over a decade running DBC, a creative agency serving brands like Spotify, American Express, and Bank of America, Carlos Williams had a realization: one of the agency’s most impactful offerings — data-driven personalized marketing campaigns like Spotify Wrapped — was ripe for productization. The idea for Ditto was born: a tool that transforms client data into personalized marketing collateral at scale.

Ditto helps brands deliver hundreds of thousands of individualized marketing assets on demand. But one major requirement of productizing and scaling these operations is ensuring data security — especially for any sensitive personal information clients would provide to fuel these data-driven projects.

“Asking clients for their customers’ proprietary data without a formal API setup, especially for one-off campaigns, meant we needed the most secure method possible,” Carlos explains.

Ditto had initially explored another platform, but quickly abandoned it when Carlos discovered they wouldn’t achieve SOC 2 compliance until 2026. “That was a dealbreaker,” he says. “We’re talking about delivering thousands—sometimes hundreds of thousands—of assets using client data. Accuracy and security are non-negotiable.” Copilot’s secure SOC 2 compliant portal became the best alternative for his security needs.

Copilot as the Backbone of Client Onboarding, Data Management & Delivery

Ditto is now using Copilot as its secure, SOC 2 and HIPAA-compliant, fully white-labeled portal provider for its data ingestion, approvals, asset delivery, and more.

“The moment I realized Copilot had billing, forms, contracts, and secure file-sharing all in one place, I decided to run my entire onboarding process through it,” adds Carlos.

Clients can access a customized portal where they upload customer campaign data to what DBC calls the “Data Vault”—a secure file repository that serves as the single source of truth throughout the campaign process.

“Before Copilot, we’d get data via email, upload it to Google Drive, and have to track versioning manually,” Carlos says. “Now we’ve centralized everything in one secure location. It’s not just easier—it’s the only way we can scale and maintain data integrity.”

Copilot also enables back-and-forth collaboration, such as approvals and legal sign-offs, without reverting to email chains or insecure links. “We’re pushing creative samples into the portal, getting client approvals, and tracking legal sign-off before we generate tens of thousands of assets. It’s all built in.”

The Result: A Scalable Infrastructure Ready for Enterprise Clients

Even before its full public launch, Ditto has run successful pilots—including a 100,000-asset microsite campaign for the National Park Service. With Copilot, the team is ready to onboard high-profile enterprise clients efficiently and securely.

“Copilot isn’t just a portal—it’s our infrastructure. We’re tying it to Microsoft Azure, automating workflows, and preparing to scale campaigns for massive organizations,” Carlos shares.

It also gives Ditto a competitive edge. “We're not competing with other creative agencies—we're partnering with them to run one type of campaign at scale. And we’re doing it in a way that makes clients feel confident about sharing their data.”

Carlos adds that Copilot’s transparent Security and Trust Center allows for his company to easily comply with security audits for clients like Bank of America.

As Ditto prepares for a major end-of-year campaign push, Copilot will be at the core of its ability to deliver timely, data-rich content—securely and at scale.