Security at DroneDeploy

Overview

DroneDeploy is a reality capture platform with end-to-end security. It encrypts data in transit and at rest, complies with SOC 2, ISO 27001, PCI/DSS, GDPR, and offers SSO, 2FA, roles, audit trails, and Privacy Mode. Data is hosted in AWS/Google Cloud with optional regional data centers.

Key features

• ▸End-to-end encryption in transit (TLS 1.2+) and at rest (AES 256)
• ▸Industry-leading compliance: SOC 2 Type 1 & 2, ISO 27001, PCI/DSS, Privacy Shield, GDPR
• ▸Robust identity management: SSO, 2FA, enterprise SSO, roles and permissions
• ▸Activity audit trails for enterprise administrators
• ▸Data hosted in AWS and Google Cloud with physical security and access restrictions
• ▸Option to store/process data in US, South Korea, UK, Australia data centers
• ▸Annual penetration testing by independent specialists
• ▸Security and privacy by design with Secure Development Lifecycle (SDL)
• ▸Bug bounty program for vulnerability reporting
• ▸Privacy Mode to automatically conceal faces and bodies in Walks