Security
Security is not an afterthought
Driomax is built for teams that take data privacy seriously. Here's how we protect your content at every layer.
SOC 2 Type II
Annual independent audit of security, availability, and confidentiality controls. Report available under NDA.
GDPR Compliant
Full compliance with EU data protection regulations. Data processing agreements available for all plans.
HIPAA Ready
Configurable for HIPAA compliance with on-premise deployment. Business Associate Agreement available.
Encryption
- AES-256 at rest
- TLS 1.3 in transit
- Customer-managed keys (Enterprise)
- End-to-end encrypted workspaces
Authentication
- SSO via SAML / OIDC
- Multi-factor authentication
- Role-based access control
- SCIM provisioning
Infrastructure
- SOC 2 certified data centers
- 99.99% uptime SLA
- Automated backups every 6 hours
- Disaster recovery < 4 hours
Data privacy
- No training on customer data
- Data residency options
- 30-day data retention on delete
- Full data export anytime
Monitoring
- 24/7 security monitoring
- Automated vulnerability scanning
- Annual penetration testing
- Public bug bounty program
Compliance
- SOC 2 Type II report
- GDPR compliance
- HIPAA BAA available
- Custom DPA for Enterprise
Found a vulnerability?
We maintain a responsible disclosure program with safe harbor for security researchers.
Report a vulnerability