Security at Drom

We put the privacy and security of our community over profits. Protecting your data, especially your location and routines is our top priority.

• Data Encryption: User-submitted data, including sensitive geolocation data and running routes, is encrypted both in transit and at rest and stored securely in the cloud.
• Access Control: We believe in the principle of least privilege, authorizing our team members with role-based access only to the specific information they need to perform their job functions.
• Infrastructure Monitoring: Access to our infrastructure and systems is strictly logged and monitored.
• Continuous Assessment: Security is integrated at all levels of our development lifecycle to help enable the creation of a better, safer app. We regularly review our systems to identify and mitigate potential risks.

Compliance

Your privacy is at the core of the way we design and build Drom, so you can fully trust the platform and focus on your training and building meaningful connections. Please see our Privacy Policy for more detailed information on how we protect your data.

Drom is built in alignment with industry-leading information security frameworks and fully complies with the Israeli Protection of Privacy Law. As our community grows, we are committed to engaging independent firms for regular audits to ensure our ongoing compliance with internationally accepted regulatory standards.

Contact Security

Drom welcomes input from the security research community. If you believe you’ve found a security vulnerability in our app or infrastructure, please contact our security team directly at dror@Drom.com to submit your findings.

Note: We explicitly prohibit testing Denial of Service (DoS) or the use of automated scanning tools against any of our applications or infrastructure.