The Files.com Agent is a small program you install on a server inside your own network — a data-center box, a NAS, a private VM — that lets Files.com read and write files on that server as if it were any other storage location. Think of it as a trusted helper sitting next to your private storage: it dials out to Files.com, and from then on that on-prem server shows up in your Files.com account alongside your cloud buckets, ready to send and receive files.

It solves the problem most companies actually have. The platform you want to run is in the cloud, but some files have to stay on a server in a specific building — for speed, for data residency rules, or because a regulation says the data can't leave your walls. The Agent makes that private server a first-class location in Files.com without ever putting it on the public internet.

How the Files.com Agent Connects

The key idea is the direction of the connection. The Agent reaches out from your network to Files.com — the way your laptop reaches out to a website. It never waits for Files.com to reach in.

That matters because letting an outside system connect into your network means opening an inbound port in your firewall, and every open inbound port is a door someone has to guard. The Agent needs none. Your firewall stays closed to the outside, and the Agent's outbound connection carries the traffic both ways.

Every transfer over that connection is encrypted end to end, so files are protected the whole way between your server and the platform. And because the Agent speaks the protocols your existing tools already use — FTPS (FTP secured with TLS encryption), SFTP (file transfer over SSH), WebDAV, and the Files.com API — scripts and applications pointed at that server keep working with no changes.

What You Can Do With the Agent

Once the Agent is connected, the on-prem server behaves like any other folder in your account. That unlocks the full Files.com feature set on top of storage that never leaves your building:

• Drop a file into the Files.com web app or mobile app and it lands on the on-prem server in real time. Someone waiting on that file can get an email or app notification the moment it arrives.
• Hand authorized partners, contractors, and other systems controlled access to specific on-prem folders — without giving them a VPN or a login to the server itself.
• Apply the same access controls you use everywhere else: multi-factor authentication, granular per-folder permissions, PGP encryption, file expiration, and a complete audit log of who touched what.
• Reach the storage systems sitting behind the server, including network-attached storage over SMB, CIFS, and NFS.

When the Agent Is the Right Tool

The Agent earns its place whenever the data has to stay put but the people and systems working with it are spread out. A hospital keeps patient records in its own data center but needs partners to upload securely. A manufacturer keeps design files on a NAS but wants automated jobs to pick them up. In each case the file stays on the local server, and Files.com handles the access, the security, and the automation around it.

You can read the deeper technical write-up on the on-premise Agent app page, and the post on the last Agent update you'll ever have to install explains how the Agent updates itself so you're not chasing patches.

Running Hybrid Storage on a Modern Platform

Files.com is the cloud-native File Orchestration Platform: one platform that replaces the stack of legacy tools IT teams run to move files — SFTP and FTP servers, MFT suites, file-sharing apps, and the custom scripts holding them together. It speaks every protocol, connects to 50+ cloud and on-prem systems, automates every transfer, and keeps a complete audit trail. The Agent is the piece that pulls your private servers into that single platform, so a NAS in your building and a bucket in the cloud are managed the same way, from the same screen.

That hybrid reach is built for exactly the team that can't go all-cloud. A file arriving on the on-prem server over SFTP can trigger an automated workflow; every action is logged for audits (SOC 2 Type II and HIPAA); and because the Agent connects outbound only, the network security team has nothing new to open up. Files.com has run this way for 15+ years across 4,000+ organizations, with eight global data-residency zones for teams that need to keep data in a specific region.

To see the Agent in action, explore Files.com remote servers and the on-prem Agent or start a free trial — no credit card, live in minutes.