Security
Last updated: June 2026
Hosting and encryption
Drill Logs runs on managed cloud infrastructure. Data is encrypted in transit with TLS and at rest with AES-256. We run daily automated backups with point-in-time recovery.
Access control
Access is role-based within each organization, so people see only what their role requires. Internal access follows the principle of least privilege, and production access is restricted and logged.
Data residency
Customer data is stored in Canada by default. Enterprise customers can request residency in the EU or Australia.
Reliability
We monitor uptime continuously, keep daily backups, and follow a documented incident-response process so issues are detected and handled quickly.
Reporting a vulnerability
If you believe you have found a security issue, email [email protected]. We acknowledge reports within two business days and work with you on a resolution.