Your data is in safe hands.
From encryption to access management, Drivetrain enforces rigorous standards to ensure your data stays secure, private, and compliant.
SOC 1 Type II
Audited controls supporting the integrity of your financial reporting.
SOC 2 Type II
Security, availability, and confidentiality controls protecting your data.
ISO 27001
Certified to the global information security management standard.
GDPR
Privacy-first controls for compliant processing of customer data.
Security, controls, and governance
built for finance teams
Enterprise-grade security
User authentication
Drivetrain supports SAML 2.0 single sign-on (SSO) and SCIM provisioning, and works with any compliant identity provider, including Okta and Microsoft Entra ID. Google Login is available as a turnkey SSO option.
We also support multi-factor authentication (MFA) for added access security, and domain allowlisting, so only users from the domains you trust can be provisioned in Drivetrain.
Role-based access control
Set access for each user or user group. You decide who can see, edit, and contribute to a report or model. Confidential compensation details can be masked, so planners see the totals they need to forecast while individual salaries stay hidden, even on drill-down.
The same controls follow your data into AI. Whether someone is accessing information through Drivetrain's AI or your preferred LLM, permissions carry over.
Audit and traceability
Get complete visibility into every action taken on the platform, by any user, through a detailed audit trail and change log.
And every number can be traced back to its source, so you can follow any figure down to the exact input and connected system it came from.
Trusted data handling
Data residency and sovereignty
Customer data is stored in the region you choose: europe-west3 (Frankfurt, Germany) or us-east1 (Virginia, USA).
Powerful encryption
All data is encrypted at rest with AES-256 and in-transit with TLS v1.2.
No foundation model training
Your confidential data remains secure and private. Drivetrain does not use your data to train or fine-tune any AI models.
AI oversight & explainability
Drivetrain's AI never changes anything on its own. It asks for your approval before modifying any model, report, or dataset.
A deterministic calculation engine produces every number, removing the risk of hallucination. And, each number can be traced back to its source, so you can verify it.
“Drivetrain has given us a reliable, transparent, & scalable planning environment. It's now our source of truth for financial performance and forecasting. The mix of product capabilities and support makes it one of the most effective tools I've implemented in FP&A.”
Jean-Thomas CookVP Finance
Can I hide salary and compensation detail from people who shouldn't see it — while still letting them see the totals?
Is my data used to train your AI models?
What certifications do you hold, and can we get the audit reports? (SOC 1 Type II, SOC 2 Type II, ISO 27001)
Does the AI respect my access controls, or could it surface data a user isn't allowed to see?
Are your AI models hosted in your own environment, or are they public models — and how is our data safeguarded when it's sent to a model?
Serious about security?
Book a demo to see Drivetrain in action.
