Security & Trust

Built to be trusted with sensitive supplier files.

A short summary for executives, IT and security reviewers. We describe outcomes, not internal design, and we only list commitments that are in place today.

Certifications: ZeroDriveX does not currently hold SOC 2, ISO 27001 or similar certifications for this service. We're happy to answer a security questionnaire under NDA.

Your data stays yours

  • Each customer's data is isolated. One customer can never see another's reviews or reports.
  • Original files are not kept after a review; only the finished report and a record of what was reviewed remain.
  • Customer documents are not used to train AI models.

Protected in transit and at the door

  • All traffic to the service is encrypted in transit.
  • Access is by individual, revocable credentials issued per customer.
  • Staff access is restricted, separately protected and time-limited.

Reports you can rely on

  • Every report is verifiable and tamper-evident, so you can prove it has not been changed since it was issued.
  • Every finding cites the document evidence behind it, and every report states its confidence and limitations.
  • Results that are flagged as uncertain go to human review before they reach you.

Discreet by default

  • No analytics or advertising trackers on the site.
  • Logs record that activity happened, never what your documents say.
  • Your team can connect existing procurement or GRC workflows; integration details are shared with customers on request.

Security questions or vulnerability reports: support@support.zerodrivex.com. See also our privacy policy and cookie policy.

Need a security review?

We'll take your IT or security team through our controls and answer questionnaires under NDA.