Security at Draper
Your data security is our top priority. We implement industry-leading security practices to protect your information and maintain your trust.
Enterprise-grade security
Built from the ground up with security in mind.
Encryption
All data is encrypted in transit using TLS 1.3 and at rest using AES-256 encryption.
Infrastructure
Hosted on SOC 2 compliant cloud infrastructure with multi-region redundancy.
Access Control
Role-based access control, SSO integration, and comprehensive audit logging.
Compliance
SOC 2 Type II certified. GDPR and CCPA compliant data handling practices.
Team Security
All employees undergo background checks and security awareness training.
Monitoring
24/7 infrastructure monitoring with automated threat detection and response.
Certifications & Compliance
We maintain certifications and comply with regulations worldwide.
SOC 2 Type II
Annual audit of security controls
GDPR
EU data protection compliance
CCPA
California privacy compliance
ISO 27001
Information security management
Our security practices
We continuously monitor, test, and improve our security posture to stay ahead of threats and protect your data.
- Regular penetration testing by third-party security firms
- Vulnerability scanning and patch management
- Multi-factor authentication for all team members
- Encrypted backups with 30-day retention
- Incident response plan with 24-hour notification
- Vendor security assessments
- Secure development lifecycle (SDLC)
- Code review and static analysis
Report a vulnerability
We appreciate responsible disclosure of security vulnerabilities. If you discover a security issue, please report it to our security team.
security@draperads.comHow we handle your data
Data minimization
We only collect and store the data necessary to provide our services. We don't sell your data or use it for purposes beyond what you've authorized.
Data retention
We retain your data only as long as your account is active. Upon account deletion, your data is purged from our systems within 90 days.
Data portability
You can export your data at any time through our dashboard or by contacting support. We provide data in standard formats for easy migration.
Third-party access
We carefully vet all third-party service providers and require them to meet our security standards. Access to your data is strictly limited to what's necessary for service delivery.
Questions about security?
Our security team is happy to answer your questions and provide additional documentation upon request.
Contact Security Team