Security Always on.

Built on infrastructure you already trust.

Audit Drive runs on the same providers your IT team already approves, and keeps every customer’s data apart, encrypted and out of AI training. Here’s how.

Read our security overview
  • AWSHosting
  • Amazon S3Encrypted data storage
  • ISO 27001Aligned security programme
  • ClaudeAI models, no training on your data
  • GitHubReviewed code changes

Who stands behind it

Our infrastructure choices, vouched for.

Audit Drive’s security design was built with a technical advisor whose career has been spent building and running infrastructure on AWS and the platforms around it.
How client evidence is stored, separated and kept to the people who should see it was reviewed with that experience behind it.

How we protect it

Six ways we protect your clients’ evidence.

  • Built on AWS

    Audit Drive runs on Amazon Web Services, in eu-west-2. We use AWS's managed services for compute, storage and databases, so the infrastructure is patched, monitored and backed up by default.

    • Hosted in eu-west-2, with data kept in that region
    • Automated, encrypted backups
    • Infrastructure defined as code and reviewed before it ships

  • Every customer kept apart

    Each firm or company is its own tenant. Your data is separated from every other customer's at the application and data layer, and every request is checked against the tenant it belongs to.

    • Tenant isolation on every query
    • Separate encryption keys per tenant [to confirm]
    • No shared workspaces between customers

  • Your data, handled with care

    Evidence is encrypted in transit and at rest. You decide how long it's kept, and you can export or delete it at any time.

    • TLS in transit, AES-256 at rest
    • Retention you control, per engagement
    • Export or delete on request

  • AI that doesn't learn from your clients

    Audit Drive's AI drafts from the evidence in your engagement and nothing else. Your evidence is never used to train AI models, ours or anyone else's.

    • No training on customer data
    • AI providers bound by zero-retention terms [to confirm]
    • AI content always marked, and always reviewed by a person

  • Access scoped to the work

    People only see the engagements they're added to. Clients only see the requests assigned to them. Every view, edit, citation and sign-off is recorded.

    • Roles per engagement: owner, reviewer, editor, client
    • Single sign-on [to confirm for MVP]
    • People only see the engagements they work on

  • Aligned to ISO 27001

    We run our own security programme against ISO 27001, the same standard many of our customers audit against. [Certification target: to confirm.]

    • Information security policies aligned to ISO 27001
    • Regular third-party penetration testing [to confirm]
    • Security documentation available on request
1–2 of 6

See how Audit Drive keeps your clients' evidence safe.

FAQ

Questions from vendor reviews.

Let’s make your next audit the easy one.

Book a 30-minute walkthrough and see Audit Drive on one of your own engagements.