Information Security and Data Protection
Driftrock is trusted by world leading compliance teams due to our by our compliance by design approach.
Trusted by 35+
Automotive Brands
Automotive Brands







GDPR Compliant
Ensuring data security and privacy through robust policies and processes that align with regulatory standards.
ISO 27001 & 9001 Certified
Demonstrating a commitment to quality and information security with globally recognised certifications.
TISAX Certified
Ensuring data security and privacy through robust policies and processes that align with regulatory standards.
Enterprise Security
Advanced SAML authentication, Azure integration, and comprehensive information security controls for large-scale organisational deployments.
more security
Built to keep you safe
Consent Management
Comprehensive consent logging and management system.
Privacy Wording ID
Track and enrich leads with privacy policy acceptance IDs.
Custom DPA
Tailored Data Protection Agreements for enterprise needs.
Data Residency
Guarantees where your data is stored and processed.
Security Audits
Protect customer data with certified security audits and testing.
Storage Controls
Fine grained data storage and retention controls.
FAQ
Data Protection and Compliance
ISO 27001 & ISO 9001
Driftrock is ISO 27001 Information Security and ISO 9001 Quality Management Certified.
General Data Protection Regulation (GDPR)
Driftrock is GDPR Compliant with the latest data privacy regulations working with our Data Protection Officer to continuously update our policies and procedures.
Data Subject Access Requests (DSAR)
Driftrock makes it easy for our customers to comply with DSARs. We comply with DSAR (data subject access request) granting individuals the right to access their personnel data and requesting information about how their personal data are being processed.
Please contact us for details on making DSARs for your end-users.
Please contact us for details on making DSARs for your end-users.
Information Commissioner's Office (ICO)
Driftrock is ICO registered under number ZB049770
Information Security features
Two Factor Authentication
Enterprise customers can enable additional two-factor security using your favourite Authenticator app.
Access Rights
Administrators can assign permission levels to manage who has access to settings and data in the Driftrock platform.
Data Visibility & Access
You can choose how data is accessed in your Driftrock account. Administrators can assign trusted team members to view and access personal data, whilst providing a safe environment for those that do not need to view or access personal data.
Data Storage
As well as visibility and access of data, you have full control over the way that Driftrock processes and stores leads and actions. For example, set personal data fields to automatically delete after a maximum of 30 days.