Where is the Sitedrive service hosted and how is it secured?
Sitedrive runs on Google Cloud Platform, which provides a globally trusted infrastructure. All data is encrypted, access rights are tightly controlled and the system scales to the load.
Where is the data stored?
Personal data: in the EU on Google servers (Hamina, Finland)
Anonymised analytics: in the USA
We do not transfer personal data outside the EU without GDPR-compliant agreements
Is the service protected against attacks (e.g. DDoS)?
Yes. The backend is protected by Cloudflare's WAF and DDoS protection.
Do you encrypt all data?
Yes. All traffic (TLS) and database data is encrypted.
What login options are available?
-
Email link (password free)
-
Google
-
Microsoft Entra ID
The administrators you choose in the Sitedrive control the permissions and roles of your account.
Is two-step identification in use?
Yes, Sitedrive can only be accessed via two-step authentication.
Is it possible to use centralised user management in Sitedrive?
Yes. Microsoft Entra ID + role-based permissions are supported.
Can Sitedrive be integrated with other systems (e.g. scheduling, ERP, BI)?
Yes. Sitedrive has a REST API interface that customers can use to build their own integrations. Data can be imported and exported from Excel, MS Project, Oracle Primavera, etc.
The features added to the interface can be implemented according to customer needs.
What would you do in the event of a data breach?
We have a five-step approach:
- Detection & analysis
- Containment
- Elimination
- Restore
- Ex-post evaluation
We report security breaches to customers as quickly and transparently as possible.
Has Sitedrive been affected by a security breach?
No. There have been no reportable incidents.
Is Sitedrive GDPR compliant?
Yes. All personal data is processed within the EU. We have DPA agreements and processing is based on customer instructions.
How do you process personal data?
- Data stored and processed in the EU
- Only basic information required by the service is collected from users
- We delete the data on request or at the end of the service
Do you use subcontractors?
Yes, we use reputable providers such as Google Cloud, Firebase, Cloudflare. All under GDPR compliant conditions.
Do you follow safe software development practices?
Yes. We use OWASP standards and:
- We perform manual code reviews
- All changes are tested before going into production
- No production data is used for testing
How often do you update the system?
We are actively developing and updating Sitedrive. You can view the latest updates here.
Is there anything you still wonder about?
Send us your question directly and we will answer it as soon as possible.