What is motivating your disaster recovery plan?

Many businesses now face federal and governing agency mandates that require meticulous backup records for electronic transactions. Industry-specific regulations emphasize confidentiality, portability, and financial record preservation, forcing organizations to implement processes that support data backup and recovery objectives.

IDrive complies with SOC 2 Type 2 and ensures highest standards of security and confidentiality for your data. IDrive assists companies within the medical, accounting, and legal professions in their effort to comply with the regulatory norms of GDPR, PCI, HIPAA, SOX, GLBA, and SEC/FINRA, and other security standards.

IDrive assists your company in meeting compliance mandate by providing:

  • Secure data transfer/storage using 256-bit AES encryption
  • Encrypted data storage to prevent tampering, alterations, and unauthorized access
  • Date and time-stamped data access by each user
  • 24/7 data access via any broadband connection
    Note:
  • IDrive cloud backup offers the choice of employing private encryption which is known only to the user and not stored on IDrive servers, in addition to default encryption. Explore the distinction between private and default encryption here.
  • Google Workspace Backup and Microsoft Office 365 Backup employ industry-standard default encryption protocols to ensure secure data storage.

IDrive complies with industry and government standards and regulations

  1. SOC 2 Type 2

    IDrive has achieved SOC 2 Type 2 certification, validating our security, availability, and confidentiality controls. Eligible customers can request a copy of the audit report from IDrive Support.

  2. ISO/IEC 27001:2022

    IDrive is certified for ISO/IEC 27001, the leading international standard for establishing and maintaining an effective Information Security Management System (ISMS).

  3. GDPR

    IDrive follows strict data protection protocols to help businesses comply with GDPR guidelines, ensuring the security and privacy of personal data.

    Know more

  4. DPF (Data Privacy Framework)

    IDrive is certified under the EU–U.S. Data Privacy Framework, the UK Extension to the EU–U.S. DPF, and the Swiss–U.S. Data Privacy Framework, administered by the U.S. Department of Commerce.

  5. PCI

    IDrive is PCI compliant and does not store credit card information directly. Payments are processed through a certified third-party vendor.

  6. HIPAA

    Healthcare providers can rely on IDrive’s secure backup solutions to store and protect electronic health records (EHRs) while meeting HIPAA security and privacy requirements.

    Know more

  7. SOX

    IDrive helps businesses comply with SOX regulations by securely retaining electronic records, messaging, and financial transactions for auditing purposes.

    Know more

  8. GLBA

    Financial institutions use IDrive to ensure secure protection of consumer financial data, aligning with GLBA compliance standards.

    Know more

  9. SEC/FINRA

    IDrive supports long-term, tamper-proof storage of financial records and electronic communications to meet SEC and FINRA compliance mandates.

    Know more

  10. CJIS

    IDrive provides controlled access, encryption, and audit logging for sensitive data. IDrive can also work with law enforcement agencies and government entities to support their needs for CJIS Security Policy compliance.

    Know more

  11. FERPA

    IDrive Inc. can work with customers to support their needs for meeting the FERPA requirements.

    Know more
Read our Compliance Statement

Business Associate Agreement

IDrive's Business Associate Agreement is in accordance with federal government standards. This agreement is available on request to IDrive Business, Team, and Enterprise users who opt for Private key encryption. IDrive Cloud-to-Cloud backup users and Bulk Resellers can also place a request.

Fill up the form to place your request for IDrive's business associate agreement.

    Associate details

    Mailing address

Ibk prog