DriveLock SE is a German provider of endpoint security. With Device Control, administrators decide which data may move to which external devices, such as USB sticks, external drives and smartphones. The solution can enforce encryption of data written to removable media and records device use and data flows. Application Control additionally governs which programmes may run. The products are offered as an on-premise solution and as a managed security service. According to the vendor, the device and application controls are certified to Common Criteria EAL3+.
The company is headquartered in Munich, Germany, and is therefore subject to German and European law. Because the software can run on the organisation's own infrastructure, control and audit data can stay within its own environment. For the managed service, it is worth checking where data is stored and which processing terms apply. According to the vendor, development and operations are certified to ISO/IEC 27001:2022.