Security Details

[akraut]

I’m trying to sell odrive as acceptable to use for our company. Are there any details on what is stored on odrive’s systems vs what is stored with the client? I’m thinking things like account credentials or cached file content.

[Tony]

Hi @akraut,
Take a look at this post here and let me know if you have any additional questions:

Odrive security (passwords, connection info, OAuth, etc)

Hi @tommyent, These are valid concerns. The thread you referenced goes into a lot of this with regards to how the connection info is encrypted and how the exact information differs between integrations types. There is also some other info in a different thread. I will post the relevant pieces here, along with some further clarification: In short, we use AES (CBC) for encrypting the connection information. We are only storing the bare essential information for facilitating access across o…