Engineering teams syncing drawings to consumer drives.
CAD files and technical data drift into commercial cloud drives one sync at a time. DRIVE gives controlled files a governed home with the same everyday workflow.
Product 02 · IRONKEEP DRIVE
Encrypted file storage built for CUI.
DRIVE is the file layer of the IRONKEEP suite: files, docs, sharing, and version history inside one authorization boundary, with audit trails that match your SSP.
Private beta · Q2 2026
Give controlled files one home.
Receive product updates and the CMMC Level 2 readiness checklist.
What's inside
DRIVE
Files, docs, sharing, and version history.
Protected files and docs
Store controlled files, documents, and spreadsheets inside the IRONKEEP boundary.
Easy to organize
Use folders, labels, previews, and search to keep work easy to find.
Controlled sharing
Share files with the right people using clear view, comment, and edit access.
More DRIVE features
Version history
Restore earlier versions when a file changes or gets overwritten.
Upload scanning
Scan uploads for malware before risky files enter shared work.
Legal hold and recovery
Deleted files are recoverable from trash. Files under legal hold are blocked from deletion. eDiscovery export in standard formats.
Audit-ready logging
Uploads, downloads, sharing, and access events are logged for assessor review.
Who it's for
Built for teams that track where CUI lives.
Subcontractors sharing files with primes and partners.
External sharing is where access cleanup breaks down. Folder-level permissions and revocation history keep sharing inside policy.
Teams preparing for a C3PAO walkthrough.
When an assessor asks where CUI lives, the answer should be one system, with audit trails that match the SSP narrative.
Implementation path
From scattered files to one boundary.
- 01
Scope your file boundary.
Decide which folders, teams, and projects hold CUI and controlled work.
- 02
Move controlled files in.
Upload and organize with folders, labels, and search. Every file is scanned on the way in.
- 03
Set sharing and evidence.
Apply permissions, retention, and legal hold, then pull audit trails when your assessor asks.
FAQ
Common DRIVE questions.
Does DRIVE replace my CMMC assessment?
No. Your organization still owns its CMMC assessment. DRIVE is designed to provide compliant file storage, control mapping, and evidence to support that assessment.
Where is my data stored?
United States only, on FedRAMP Moderate authorized cloud infrastructure, administered by US citizens. Tenant-scoped encryption keys and tenant isolation keep other tenants and IRONKEEP staff from reading tenant content.
Can IRONKEEP staff read my files?
No. Zero operator access to tenant content is enforced by explicit deny rules on decrypt operations. IRONKEEP staff cannot read decrypted tenant content, run tenant decrypt operations, create product users, or generate tenant search tokens.
What happens if someone uploads an infected file?
Every upload is virus-scanned before it reaches your storage, and infected files are quarantined automatically.
Does DRIVE support legal hold and eDiscovery?
Yes. Deleted files are recoverable from trash, files under legal hold are blocked from deletion until the hold is released, and eDiscovery exports come in standard formats.
See also
Comparisons and guides.
vs Google Workspace The add-ons and configuration CUI requires on Workspace, and what DRIVE includes by default. vs Microsoft GCC High What a GCC High migration costs, and how DRIVE provides a dedicated file boundary without the tenant rebuild. How safe is Google Drive for CUI? Where commercial file sync falls short for controlled data. Encrypted CUI is still CUI Why encryption alone does not remove handling requirements. What is CUI? Controlled Unclassified Information, explained for small contractors. CMMC Level 2 access control policies The access control family, mapped to day-to-day file sharing.
Private beta
Get DRIVE early.
Join the beta list and receive the CMMC Level 2 readiness checklist.
No sales call required.