Data Security &
Zero-Trust Architecture
How WhichDrive protects your account access, encrypts credentials, and ensures 100% file content privacy.
AES-256 Token Encryption
All Google OAuth tokens, Dropbox refresh keys, and API secrets are encrypted using military-grade AES-256 encryption at rest.
Zero Content Retention
We never download, read, or store your actual file contents. Only metadata (file names, sizes, modified dates) is indexed.
Supabase RLS Data Isolation
Workspace records are strictly segmented with Postgres Row Level Security (RLS) policies ensuring total tenant isolation.
Google OAuth Verification
Authentication complies strictly with Google API Security standards and official OAuth 2.0 specifications.
Permanent Client Revocation Link
Clients receive a permanent email revocation link to un-link their Google Drive and purge tokens instantly at any time.
Rate Limiting & Rejection Privacy
Magic link invites are rate-limited to 5 per 15 mins. Client rejections notify only the sender with zero client email spam.
Your Secrets Stay Safe On Google
Try WhichDrive free today with complete zero-content retention peace of mind.