Draftbox

Security & Enterprise Features

Enterprise-grade security features that keep your data safe and your organization compliant.

SSO (Single Sign-On)

SSO lets your team log in to Draftbox using your organization's identity provider (Google Workspace, Microsoft Entra, etc.) instead of separate passwords. Available on Business and above. No more forgotten passwords — one login for everything.

SAML SSO + RLS

SAML-based SSO adds a higher security layer with federated authentication. RLS (Row-Level Security) ensures users can only access data they are explicitly permitted to see — even within the same database. Available on Enterprise and Scientist Team.

Audit Log

The audit log tracks every important action in your organization — who did what, when, and from where. Essential for compliance, security reviews, and incident investigation. Available on Business and above.

SLA (Service Level Agreement)

An SLA guarantees a minimum uptime percentage. Enterprise includes a 99.9% SLA (max ~8.7 hours downtime/year). Scientist Team includes a 99.5% SLA (max ~43.8 hours downtime/year). If we miss the target, you get service credits.

Security Lockdown — What it means for you

Draftbox has an automated security system called the Governor. When it detects a potential security event (unusual access patterns, compromised credentials, or infrastructure issues), it can activate a lockdown to protect your data.

What happens during a lockdown?

  • Your data is safe. Nothing is deleted or modified — your work is intact.
  • Reads work normally. You can view your workspaces, drafts, and items.
  • Writes are paused. Saving, creating, and editing are temporarily blocked.
  • AI features are paused. Chat, enrichment, and indexing stop until the lockdown lifts.

How long does it last?

A lockdown is lifted manually by an administrator after investigating the security event. The unlock process depends on your setup:

  • Team accounts: System-wide lockdowns require two administrators to approve the unlock (two-man rule). This ensures no single compromised admin can override security measures.
  • Solo accounts: If you're the only admin, you can unlock directly — the two-man rule is automatically skipped since there's no second person to approve.

In most cases, lockdowns are resolved within 30–60 minutes of being triggered, once the admin verifies the event was either a false alarm or has been contained.

What should I do?

  • Wait — the security team is already notified automatically when a lockdown activates.
  • Don't panic — your data is safe and you can still read everything.
  • Contact support if the lockdown lasts more than an hour: support@fixpro.gr

Need enterprise security?

Compare plans to see which security features are included at each tier.

Compare plans