Driftro Trust Center
Driftro exists to tell you the truth about uptime, so we hold ourselves to the same standard with your data. This page covers how we protect what you send us, where we stand on compliance, and where to find our policies. If you don't see what you need, ask us directly.
Compliance
Where things stand today.
We treat compliance as an ongoing commitment, not a one-time checkbox.
Data residency
AvailableYour data is hosted in Stockholm, Sweden, with encrypted backups kept in the EU.
Encryption
EnabledData is encrypted in transit using TLS and encrypted at rest, backups included.
GDPR
In progressWe're finalizing our approach for EU visitors and data subjects. Ask us for the current status.
Security controls
Controls across every layer.
Defense-in-depth measures spanning access, data, applications, and infrastructure. Ask us for more detail on any of these.
Access control
Least-privilege by default: every account gets only what its role needs, nothing more.
Production access requires its own individual account. Shared logins aren't allowed.
Access rights are reviewed on a regular basis and revoked immediately on offboarding.
Data encryption
Data in transit is encrypted using TLS over public networks.
Data at rest is encrypted using industry-standard algorithms.
Backups are encrypted too, and tested to confirm they actually restore.
Application security
Security is part of the review process for new code, not a check that happens after the fact.
Every customer's data is logically separated, so one account can never see another's.
We track and remediate known vulnerabilities in the libraries we depend on.
Network & infrastructure
Driftro runs on established, audited cloud infrastructure with built-in redundancy.
Production is isolated from development and testing, with firewalls limiting what can reach it.
Our own status and uptime are monitored continuously, the same way we monitor yours.
Subprocessors
Who else touches your data.
We work with a small number of trusted subprocessors to run Driftro, for things like hosting, email delivery, and payments. We keep that list tight on purpose.
We'll share our current subprocessor list and notify you before adding a new one.
FAQ