Platform Security & Responsible Disclosure
Last Updated: October 2025 · ISO 27001 & SOC 2 Aligned Protocols
At OnDrive, the integrity of our customer, merchant, and driver ecosystem is paramount. We employ defense-in-depth architectural safeguards to protect every transaction and communication.
End-to-End Encryption
All network traffic is encrypted using Transport Layer Security (TLS 1.3) with modern cipher suites and HTTP Strict Transport Security (HSTS).
PCI-DSS Level 1 Payment Processing
Payment credentials and credit card numbers are tokenized directly with certified processors. OnDrive never stores raw card details on its servers.
Role-Based Access Control (RBAC)
Internal access to merchant and consumer records is restricted based on least-privilege principles, enforced with multi-factor authentication (MFA).
Responsible Vulnerability Disclosure
Security researchers identifying potential vulnerabilities are encouraged to report findings directly to security@ondrive.uk with detailed reproduction steps.
security@ondrive.uk
Security researchers identifying potential vulnerabilities are encouraged to report findings directly to security@ondrive.uk with detailed reproduction steps.