Your files are safe.
Here's the proof.
Security isn't a feature at VirtualDrive — it's the foundation. Every architectural decision was made with your data's safety as the first priority.
- AES-256 at rest
- TLS 1.2+ in transit
- Row Level Security
- Bcrypt passwords
- Immutable audit logs
- Role-based staff access
Six layers of protection
Defense in depth — every layer independently blocks unauthorized access, even if another layer were compromised.
AES-256 encryption at rest
Every file stored on VirtualDrive is encrypted using AES-256 — the same standard used by banks and governments. Files are encrypted before they hit the disk and can only be decrypted by the authenticated account owner.
TLS 1.2+ in transit
All data transmitted between your device and VirtualDrive is protected by TLS 1.2 or higher. This prevents man-in-the-middle attacks and ensures your files cannot be intercepted during upload or download.
Row Level Security
Every database table is protected by Row Level Security (RLS) enforced at the database engine layer — not just the application. Even if the application had a bug, the database itself would reject unauthorized access.
Strict staff access controls
Staff access is limited to legally-required actions (abuse and CSAM moderation on public share links, account-level support you request, and similar) — never browsing your files for any other reason. We do not sell your data and we never train AI on file contents.
Self-service account deletion
You can delete your account at any time from settings. When you do, all your files are immediately purged from every storage provider we use — not flagged for deletion, not soft-deleted, actually removed.
Security practices
A full checklist of how we handle your data.
- Passwords hashed with bcrypt — never stored in plain text
- Email verification on account creation
- Executable file types blocked from upload at the server
- Session tokens rotate automatically on each login
- Self-service account deletion — all files purged from storage immediately on request
- Infrastructure hosted on SOC 2-compliant cloud providers (AWS, Cloudflare, Supabase)
Where your data lives
VirtualDrive runs on SOC 2 Type II certified, US-based enterprise infrastructure. Your files are stored in geographically redundant object storage with automatic backups. Specific sub-processors are listed in our Privacy Policy.
Have a security concern or vulnerability to report? Contact us at support@virtualdrive.us. We take every report seriously and respond within 24 hours.