DraftWise Inc

DraftWise Inc is SOC 2 Type II compliant. On SOC2C this listing is Listed.

According to DraftWise Inc's public trust center, DraftWise Inc is ISO 27001 certified. On SOC2C this listing is Listed.

According to DraftWise Inc's public trust center, DraftWise Inc is GDPR compliant. On SOC2C this listing is Listed.

DraftWise Inc is SOC 2 Type II compliant. A Type II report covers how security controls operated over a period (typically 3 to 12 months), a stronger signal than a point-in-time Type I.

Yes. DraftWise Inc's SOC 2 status, frameworks, auditor, and renewal timing are on SOC2C for vendor risk and security reviews. Request the underlying report through SOC2C to complete your third-party risk file.

Draftwise strictly adheres to industry standards for highly sensitive data. Our engineering and security teams have deep experience building secure deployments for global companies and government agencies and hold multiple patents in data, AI, and application security. Draftwise has been certified for Cyber Security Essentials Plus and is SOC2 Type II compliant.

Draftwise has been certified for Cyber Security Essentials Plus (UK Cybersecurity standard) and is SOC2 compliant. We strictly adhere to industry standards for highly sensitive data and can further configure the security architecture to your specific requirements. Our engineering and security teams have deep experience building secure deployments for global companies and government agencies and hold multiple patents in data and application security.

Firm data is encrypted at rest & in transit. We use the following protocols: At Rest: AES-256 encryption algorithm. In Transit: Data transmission via HTTPS using TLSv1.2 or TLSv1.3. We use AWS CloudWatch for audit logs and monitoring services. Logs are collected and stored from resources, applications, and services we deploy in near-real-time. We have rules-based and composite high-resolution alerting in place. We apply anomaly detection to our container/applications. Logs are retained for up to two years. Any additional questions about encryption or audit trails/logs can be directed to sales@draftwise.com.

Draftwise is designed with technologies trusted by S&P 500 companies and intelligence agencies. We provide a variety of deployment configurations to support your firm’s technology and compliance requirements, including both cloud and on-premise deployment options. We offer containerized, access-controlled, auto-scaling SaaS offering, implemented with state-of-the-art security practices adopted by most secure S&P 500 companies and world governments. We have a control framework, audit alerting, and routine security evaluation.

Firms have two options when deploying on the cloud with Draftwise. We can deploy a private tenant or private cloud specific to your firm in a region of your choosing. By default, no data leaves the VPC or is visible to any other Draftwise customers and network access can be globally restricted to only firm IP subnets. We can also deploy to your firm’s existing cloud infrastructure, either in a standard containerized approach (helm chart and private image registry), VM images, or Linux binaries. We can either administer and upgrade the software or provide instructions for firm IT to self-service. Our software can be deployed with a small resource footprint and scaled as usage grows. AI features are not available with this deployment method.