Protection you can verify.
EverDrive treats your originals as evidence: immutable, fingerprinted, tenant-isolated and governed — with an audit trail for every meaningful action.
Identity & sessions
Password or federated sign-in (Google, Microsoft, GitHub). 12-hour sessions, CSRF protection, per-request authentication.
Tenant isolation
Every object is tenant-bound. Membership is reasserted on every API, worker, storage, search and export operation.
Credential protection
Provider credentials and tokens are encrypted at rest in the credential vault — never displayed, exported or logged.
Integrity verification
Every original is SHA-256 fingerprinted and read-back verified before it counts as archived.
Auditability
Connections, authorizations, deletions, restores and administrative actions are recorded in the audit log.
Governance
Retention policies and legal holds (organization workspaces) block destructive operations until released.
How a protected item flows
Governance when you need it
Organization workspaces add retention policies, legal holds, eDiscovery cases and manifest-verified exports — the controls that block destructive work until policy says otherwise.
- Retention defines how long items persist
- Legal holds block purge and Free Space for held items
- Exports include SHA-256 manifests for custody verification
- Purge is irreversible, privileged and hold-aware
Your data, your exit
No lock-in. Exports package your protected originals with verification manifests. Disconnecting a source removes stored credentials while your archive stays preserved under your control.
Questions about security?
Talk to us, or read the documentation.