Trust

Security overview

How DriftGuard protects customer data on the hosted service at driftguard.org.

Data handling

Watch configurations, snapshots, and drift history are stored in encrypted Cloudflare D1 and R2. API keys are stored as one-way hashes with public prefixes only.

Subprocessors

See our Privacy Policy for the current list of infrastructure subprocessors (Cloudflare, email, analytics when consented).

Compliance

SOC 2 Type II and formal penetration test summaries are available to Enterprise customers under NDA. Contact hello@driftguard.org or sales.

Report a vulnerability

Email hello@driftguard.org with subject Security disclosure. We respond within two business days.