Zero-Trust Metadata Security:
100% Privacy Guarantee
We never download, inspect, or retain your actual document files or folder contents. WhichDrive indexes strictly lightweight metadata (file names, sizes, mime types, modified timestamps) to power sub-second search while your actual content remains safe on Google's encrypted servers.
Security Architecture Pillars
Enterprise security specifications for peace of mind.
AES-256 Token Encryption
OAuth 2.0 refresh tokens are encrypted at rest using military-grade AES-256-GCM symmetric key encryption with unique initialization vectors.
Zero Content Retention
No document contents, PDF text bodies, images, or confidential drafts are ever transferred or saved on WhichDrive database servers.
Row Level Security (RLS)
Database isolation policies strictly enforce that users can only query file metadata linked directly to their authenticated session ID.
Official Google OAuth Specs
Fully compliant with Google API User Data Policy & Limited Use requirements for third-party multi-cloud productivity apps.
Experience Zero-Trust Security
Your files stay on Google servers; your privacy remains 100% intact.