tekDrive Security

Our Security Approach

tekDrive follows a defense-in-depth approach that combines secure infrastructure, access controls, encryption, monitoring, and operational best practices.

Security is treated as a shared responsibility between tekDrive and our customers.

Data Encryption

Data handled by tekDrive is protected using modern encryption standards:

Encryption in Transit

• All data transmitted between users and the Service is encrypted using TLS 1.2 or higher
• Secure cipher suites are enforced to protect data from interception

Encryption at Rest

• Data stored within tekDrive systems is encrypted at rest using industry-standard encryption (AES-256 or equivalent)
• Uploaded media, customer records, and operational data are protected by multiple layers of storage security

Authentication & Access Control

tekDrive implements access controls designed to prevent unauthorized access:

• Identity Management: Authentication is handled using trusted identity providers and secure authentication mechanisms
• Multi-Factor Authentication (MFA): MFA is supported and strongly encouraged for all users
• Role-Based Access Control (RBAC): Permissions are scoped to user roles so users only access data necessary for their job function
• Session Management: Secure session handling, timeouts, and session invalidation mechanisms are used to reduce risk

Credential Security

tekDrive does not intentionally store plaintext user passwords. Authentication credentials are protected using industry-standard hashing, tokenization, and identity management practices.

Infrastructure Security

tekDrive operates on cloud infrastructure designed for high availability and security.

• Cloud Hosting: The platform runs on Amazon Web Services (AWS)
• Physical Security: AWS data centers provide 24/7 physical security, monitoring, and access controls
• Network Protections: Firewalls, network segmentation, and traffic monitoring are used to reduce exposure
• Isolation: Customer data is logically isolated within our systems

AWS maintains independent compliance programs and certifications for its infrastructure. tekDrive leverages these controls as part of its overall security posture.

Backups & Disaster Recovery

• Data is backed up regularly to support disaster recovery and business continuity
• Backup systems are protected by access controls and encryption
• Backup retention periods are managed according to operational and legal requirements

Backups are not intended as an archive or long-term storage substitute.

Vulnerability Management

tekDrive takes a proactive approach to identifying and mitigating security risks:

• Regular review of system configurations and dependencies
• Timely application of security patches and updates
• Monitoring for suspicious or anomalous activity
• Secure development practices, including code review and testing

Responsible Disclosure

We welcome responsible disclosure of security vulnerabilities. If you believe you have discovered a security issue, please contact:

security@tekdrive.net

We review all reports and respond promptly.

Third-Party Services

tekDrive relies on trusted third-party service providers to operate the Service, including providers for hosting, authentication, communications, and monitoring.

These providers are selected based on their security posture and are subject to contractual confidentiality and security obligations. Their services are governed by their own security and compliance programs.

Shared Responsibility

Security is a shared responsibility:

tekDrive is responsible for securing the platform, infrastructure, and Service operations.

Customers are responsible for:

• Managing user access and permissions
• Enabling available security features such as MFA
• Ensuring employees and users follow internal security policies
• Complying with applicable laws when collecting or processing data

Misuse of the Service or failure to implement reasonable internal controls may increase risk.

No Absolute Guarantee

While tekDrive implements reasonable administrative, technical, and organizational safeguards, no system is completely secure.

We do not guarantee that unauthorized access, data loss, or system compromise will never occur.

Questions About Security?

If you have questions about our security practices or need additional information, please contact us:

Email: security@tekdrive.net