SecurityLast Updated: May 09, 2018
We keep your data secure.
Security is something we think about and consider every time we’re implementing a feature or using a service. We have an extremely high bar for keeping data secure and continually audit and update our processes to make sure your data is never compromised.
We use Amazon Web Services
AWS sets the industry standard when it comes to security, policies, and architecture. We trust them with our servers along with hundreds of millions of other companies, including Comcast, AirBnB, and Expedia. We restrict access and communication to and from these servers to the minimum required to use our product.
Two Factor Authentication
Everyone on our team has two-factor authentication setup for their accounts where possible, which means that nobody can access their accounts without a security code sent to our mobile devices at the time of attempted login.
Storing your passwords
We never store passwords in plain text. All passwords are salted and then hashed before they are stored.
All communication between your computer and Drift is encrypted using industry standard HTTPS/SSL.
We do not store your payment information directly. Payments are stored in Recurly, which follows industry standards. You can read more about their security standards here.
We authenticate access to Drift services using revocable access tokens. Contact us immediately if you have reason to believe any access tokens may have been compromised.
Not using drift yet? Get your free account here.