Trust Center
Trust and securityat Draftt.
Draftt keeps your infrastructure ahead of tech debt and holds itself to the same standard. This page describes how we secure customer data, which audits we complete, and what we do and do not access.
Frameworks & certifications
Independently audited.SOC 2 Type II and GDPR.
Controls
controls in place.Across areas.
Data access
Metadata, not business data.Read-only by default.
Draftt reads configuration and metadata, not business data. The default grant is read-only, delegated through your own cloud identity model, and revocable by you at any moment.
What Draftt accesses
What Draftt never accesses
No agents on your hostsNo inbound connectivity or VPNRevocable at any time
Subprocessors
Who helps us run Draftt.And what they do.
FAQ
Security questions,answered.
Controls
Every control,in one place.
ControlStatus
Running a security review?We'll make it quick.
Request the SOC 2 Type II report, send a security questionnaire, or ask for our evidence pack. The security team answers directly.