Skip to main content

Customer Control Over Data

Files.com gives customers direct control over how their data is encrypted, where it lives, who can access it, how long it is kept, and how it leaves the platform. The controls described here sit alongside the customer responsibilities defined in the Shared Responsibility Model.

Customer-Controlled Encryption

Customers on Power and Enterprise plans can apply GPG encryption to file contents using their own keys, independently of connection encryption and Native Storage encryption. GPG processing can be performed manually on selected files, as an explicit Automations v2 step, or through folder processing. Manual processing and Automations v2 do not require a folder setting; Automations v1 uses folder processing. See Data Encryption & Key Management for the assurance boundaries and GPG/PGP for availability, permissions, and configuration.

Storage Location Controls

Customers select the storage region for Native Storage and, on supported plans, can assign different regions to different folders. Global Acceleration and Remote Server routing affect transfer paths separately. Temporary processing, logs, AI providers, and connected systems require their own review; selecting a folder region does not establish complete regional confinement. Data Location & Processing explains those distinctions.

Data Retention and Deletion

Customers can expire working files, retain deleted contents for recovery, and preserve archived versions. These choices have different effects, and remote storage has its own recovery controls. Logs and operational records have separate lifetimes. Data Retention & Deletion explains these boundaries and the paid-account and trial-account deletion policies.

Access Controls and Authentication

Customers manage their own logical access controls, including user and group permissions, Role-Based Access Control (RBAC), and Two-Factor Authentication (2FA). Customers provision and authenticate users through identity providers including LDAP, Active Directory, Azure, Okta, OneLogin, and Auth0.

Audit Logs and Activity History

Files.com provides activity history showing who accessed, modified, or deleted files, as well as separate request logs and operational records. File activity history is retained for seven years; request logs and other record types have different retention periods. Do not apply the file-history period to every log available through the web interface or API. The CLI and API can also export site configuration details, including user, group, and folder permission mappings.

Customers are responsible for logging the activity of their own end users outside of the Files.com platform. See the Shared Responsibility Model for the full split of responsibilities.

Data Portability and Export

Customers export all stored data and account configuration using Files.com tools. The web interface, CLI, and API transfer files and download user and settings information at any time. Files.com does not support bulk import or export using physical media.

Data Classification

Customers classify their own data (for example, Confidential, Protected, Sensitive, or Public) and define the retention schedules that fit their organizational and regulatory context.

Content Scanning and DLP Integrations

Files.com does not analyze customer file contents for its own purposes. Content is inspected only where a customer turns on a feature that does so:

  • Malware Scanning inspects new uploads to a protected folder and quarantines any file where it finds a threat.
  • Content Validation runs a script you supply against a file's parsed data to decide whether the data is acceptable.
  • TransformScript reads a file, reshapes it, and writes the result, across formats including CSV, XLSX, JSON, YAML, XML, HL7, X12, and EDIFACT.
  • AI features can process file contents, prompts, metadata, and tool results to complete authorized work. Their provider processing and customer controls require a separate review.

Data Loss Prevention and third-party content scanning integrations are not supported. Customers interested in future integration capabilities can contact Files.com to express interest.