DriveCrypt provides 100% FULL DISK encryption.  All files, folders and sectors are encrypted - nothing is left to chance or user error.

Unless your data is encrypted it is incredibly simple for anyone to view, remove and share ANY of the data that was stored on the laptop.  This is possible even though the Administrator or Root password may not be known...

There have been many high profile, embarrassing instances recently where company employee details, patient details, bank details, customer databases, credit card details and other confidential information has been retrieved in this way and either distributed or used for criminal purposes.

DriveCrypt uses an AES 256-bit encryption cipher which currently has not been broken.  Experts think that this is very strong, and it should be good for at least several decades.

Technically speaking, DriveCrypt uses the Rijndael block cipher. Rijndael was also chosen for the "Advanced Encryption Standard" (AES) by the U.S. government .

DriveCrypt Enterprise has been awarded FIPS accreditation.

See Wikipedia about AES and how it works:

Encryptions is seamless, happens behind the scenes and a user will not even notice it running.

Typically it can take between 1 and 3 hours for the machine to be fully encrypted (depending on the size of disk / data) but the machine can be shut down or restarted at any time.   Encryption will continue where it left off until complete.

Everything else is 100% transparent to the user.

On successful completion of a pre-selected challenge / response question, the DriveCrypt Management console is able to generate a password to enable the user access.

However, as part of your policy we strongly recommend that you lock down access to all removable media also. You should stop people being able to copy data to USB sticks in the first place and only authorise specific users / devices which are approved and encrypted.

We recommend DeviceLock Enterprise for controlling device access company wide.

Users can have a single username and password which they enter at the pre-boot screen, which will start the PC / laptop and can also log them onto Windows / the network as required.

DriveCrypt works with a wide range of OS’s – including Windows XP and 2000, offer much stronger protection, much higher encryption techniques, and feature Enterprise deployment and management tools.

Unlike Microsoft products they do not require special chips to be present on the computer (TPM) and our software can be installed at any stage.

Let us assume a sensitive file is stored on a laptop. That file could be stored, theoretically, not just in the encrypted folder but copied to the desktop or temp filder location - or wherever. If the user does not take particular steps to keep this file in the encrypted folder, then data is exposed.

Secondly to encrypt this folder creates subfiles or temporary files which can contain portions of the confidential file. If someone gets hold of a stolen computer, then they could gain access to that temporary file and therefore to the data. With ‘’full disk’’ encryption you are 100% secure.

So what about protecting all your legacy laptops? What about deployment and management?

As a comparison for instance, Microsoft Windows XP (Professional version only) already features a little known encryption system EFS, but no one uses it because it is too complicated and it makes the machines very slow. If a solution is difficult to install, manage and use then mistakes can happen - or more likely users wont use it at all.

DriveCrypt is a very easy, two minute install. If you have ten or ten thousand machines you can, from the central management console, install the software automatically and be fully protected – no matter what hardware they have - in a matter of an hour or so.

DriveCrypt also offers special features which other solutions do not, for instance, the possibility to set more than one password for one computer. This means that if a person is forced by an aggressor to reveal a password that person can instead reveal a “false” password. This will boot a fake operating system which is not distinguishable from the original one. So although the aggressor does have access to the machine he is seeing fake data - however they will be unaware of this fact. So the person would be cooperative with the aggressor but the data is still kept safe.