> ## Documentation Index
> Fetch the complete documentation index at: https://docs.thedrive.ai/llms.txt
> Use this file to discover all available pages before exploring further.

# Security & Privacy

> How The Drive AI protects your data with enterprise-grade security

## Overview

The Drive AI is built with security at every layer. Your files are protected by enterprise-grade encryption, real-time threat detection, and strict privacy controls. Your data is never used to train AI models.

## Encryption

### Data at Rest

All files stored in The Drive AI are encrypted using **AES-256** encryption—the same standard used by banks and government agencies.

### Data in Transit

All data transmitted between your device and The Drive AI servers is protected with **TLS 1.3**, the latest and most secure transport encryption protocol.

| Layer          | Standard | Details                              |
| -------------- | -------- | ------------------------------------ |
| **At rest**    | AES-256  | Files encrypted on storage servers   |
| **In transit** | TLS 1.3  | All connections encrypted end-to-end |

## Certifications & Compliance

<CardGroup cols={2}>
  <Card title="CASA Certified" icon="certificate">
    The Drive AI has passed the Cloud Application Security Assessment (CASA), an independent security evaluation for cloud applications.
  </Card>

  <Card title="Microsoft Verified Partner" icon="shield-check">
    Verified by Microsoft as a trusted application partner, meeting their security and quality standards.
  </Card>
</CardGroup>

## Threat Detection

### Real-Time Malware Scanning

Every file uploaded to The Drive AI is automatically scanned for malware and viruses in real time. Infected files are blocked before they enter your workspace.

* Scans run automatically on every upload
* Known threats are blocked immediately
* Scanning applies to all file types

## Zero-Knowledge AI

<Info>
  **Your data is never used to train AI models.** The Drive AI processes your files to provide features like search, organization, and chat—but your content is never used as training data for any AI model.
</Info>

Your files are:

* **Processed only for your benefit** — AI reads your files to organize, search, and answer questions
* **Never shared with third parties** — your content stays in your workspace
* **Never used for model training** — no AI model is trained on your data
* **Isolated per workspace** — team workspaces are fully isolated from each other

## Access Controls

### Authentication

The Drive AI supports secure authentication through:

* Google OAuth
* Microsoft OAuth
* GitHub OAuth
* Email and password with verification

### Workspace Isolation

Each workspace is fully isolated:

* Personal workspace files are private to you
* Team workspace files are only accessible to workspace members
* External collaborators can only see explicitly shared items
* No cross-workspace data access

### Role-Based Access

Team workspaces include role-based access control:

| Role       | Capabilities                                       |
| ---------- | -------------------------------------------------- |
| **Owner**  | Full workspace control, billing, member management |
| **Admin**  | Manage members, settings, all files                |
| **Member** | Upload, organize, share files                      |
| **Viewer** | Read-only access                                   |

### File-Level Permissions

Granular permission controls on individual files and folders:

* Set viewer, editor, or admin access per file
* Revoke access at any time
* Track who has access to what

## Infrastructure

The Drive AI runs on enterprise-grade cloud infrastructure with:

* Redundant storage across multiple data centers
* Automatic backups
* High availability architecture
* Regular security audits

## Privacy Practices

* **Minimal data collection** — we only collect what is needed to provide the service
* **No advertising** — your data is never used for ads or sold to third parties
* **Transparent policies** — clear privacy policy and terms of service
* **Data deletion** — request complete deletion of your account and data at any time

## Reporting Security Issues

If you discover a security vulnerability, please contact us at [contact@thedrive.ai](mailto:contact@thedrive.ai). We take all security reports seriously and will respond promptly.

## What's Next?

<CardGroup cols={2}>
  <Card title="File Sharing" icon="share-nodes" href="/features/file-sharing">
    Learn about sharing files with granular permissions.
  </Card>

  <Card title="Plans & Pricing" icon="credit-card" href="/account/plans-pricing">
    View available plans and features.
  </Card>
</CardGroup>