Drill.Logs

Security

Last updated: June 2026

Hosting and encryption

Drill Logs runs on managed cloud infrastructure. Data is encrypted in transit with TLS and at rest with AES-256. We run daily automated backups with point-in-time recovery.

Access control

Access is role-based within each organization, so people see only what their role requires. Internal access follows the principle of least privilege, and production access is restricted and logged.

Data residency

Customer data is stored in Canada by default. Enterprise customers can request residency in the EU or Australia.

Reliability

We monitor uptime continuously, keep daily backups, and follow a documented incident-response process so issues are detected and handled quickly.

Reporting a vulnerability

If you believe you have found a security issue, email [email protected]. We acknowledge reports within two business days and work with you on a resolution.