Security

Updated 5 months ago ​by Matt Bilotti

We keep your data secure.

Security is something we think about and consider every time we’re implementing a feature or using a service. We have an extremely high bar for keeping data secure and continually audit and update our processes to make sure your data is never compromised.

We use Amazon Web Services

AWS sets the industry standard when it comes to security, policies, and architecture. We trust them with our servers along with hundreds of millions of other companies, including Comcast, AirBnB, and Expedia. We restrict access and communication to and from these servers to the minimum required to use our product.

Two Factor Authentication

Everyone on our team has two-factor authentication setup for their accounts where possible, which means that nobody can access their accounts without a security code sent to our mobile devices at the time of attempted login.

Storing your passwords

We never store passwords in plain text. All passwords are salted and then hashed before they are stored.

Encryption

All communication between your computer and Drift is encrypted using industry standard HTTPS/SSL.

Payment info

We do not store your payment information directly. Payments are stored in Recurly, which follows industry standards. You can read more about their security standards here.

Authentication/access

We authenticate access to Drift services using revocable access tokens. Contact us immediately if you have reason to believe any access tokens may have been compromised.

If you have any concerns or questions about our security practices, please feel free to reach out to us via chat. We’re happy to talk on a more technical level.

Not using drift yet? Get your free account here.


Was this article helpful?

Can’t find what you’re looking for?

Talk To Us