We check all the boxes
SOC 2 Type II
Driveway is proud to be SOC 2 Type II and SOC 3 compliant. Our SOC 2 Type II audit report is available on execution of an NDA.
High availability
Driveway's infrastructure is hosted in SOC 2 Type II and ISO 27001 compliant data centers with backups for high availability.
Advanced encryption
All data is encrypted at rest with AES-256 block-level storage encryption, and in Transit with TLS certificates.
Extensive monitoring
All data is protected by access control measures, alerting, and monitoring systems to prevent and identify threats.
Corporate security
Driveway staff uses managed devices, two-factor auth, and receives regular security awareness training.
Incident recovery
Our systems are built with disaster recovery in mind, and we follow best practices to mitigate and respond to incidents.
Frequently asked questions
Is Driveway SOC 2 compliant?
What data does Driveway have access to?
How does Driveway's blur feature enhance data protenction?
Which authentication mechanisms do you have in place?
Does Driveway offer BAA agreements for HIPAA compliant organizations?
How can I report a security concern or ask a question?