Cloud Hosting Environment

Files.com is a fully cloud-hosted SaaS platform running on Amazon Web Services (AWS). We operate hundreds of virtual machines across multiple AWS regions. The architectural and hosting practices described on this page are reviewed annually as part of our SOC 2 Type II audit.

Platform Architecture

Our platform is built from modular services in Java, Ruby, Go, JavaScript, Python, and other languages, deployed across virtual machines and time-synchronized using Network Time Protocol (NTP).

Containers isolate high-risk processes such as document previews, malware scanning (not generally available), file conversions, and compression or extraction workflows.

Network and Data Flow Diagrams

Files.com maintains detailed network and data flow diagrams that describe our technical architecture. These materials are proprietary and not shared externally. They cover the full system lifecycle from development through production and are reviewed as part of our SOC 2 audit.

On-Premise, Hybrid, and Cloud Deployment Models

Files.com is a fully cloud-hosted SaaS platform. It cannot be run as an on-premise or self-hosted application. The platform is accessed over the public internet and does not require a VPN or private network connection.

For hybrid cloud use cases, Files.com offers an optional agent and SDKs that deploy inside a customer's private environment. These tools bridge on-premise storage and internal systems to Files.com.

Software Applications

Files.com supports a range of applications and tools, all covered under our Software Development Life Cycle (SDLC):

• Web application
• Desktop apps for Windows and Mac
• Mobile apps for iOS and Android
• Cross-platform Command Line Interface (CLI)
• Open source SDKs in multiple languages

Cloud Infrastructure, Data Centers, and Hardware Hosting

Files.com does not own or operate data centers. All infrastructure is hosted on AWS, which manages hardware, system maintenance, and physical access. AWS holds ISO 27001 certification and completes regular SOC 2 Type II audits, which Files.com reviews annually as part of our vendor risk management program.

AWS does not disclose hardware specifications. Files.com relies on AWS for redundancy, maintenance, and infrastructure lifecycle management.

Physical Security and Environmental Controls at AWS

AWS data centers implement strict physical and environmental safeguards. Facilities are nondescript and tightly controlled, with 24/7 professional security staff, biometric authentication, surveillance, and intrusion detection systems. Access to data center floors requires multi-factor authentication and is limited to individuals with a valid business need. All access is logged and audited.

Environmental protections include smoke detection, fire suppression systems, climate control for temperature and humidity, and fully redundant power systems with uninterruptible power supplies (UPS) and backup generators.

Files.com Office Security

Files.com maintains two physical office locations. These sites do not house production infrastructure or privileged customer data.

Office computers function as remote workstations and connect to internal systems via secure, on-device VPN. Physical entry is controlled via badge systems. Non-employees must be escorted at all times. Offices are protected by monitored alarm systems, and all physical access is logged and audited.

Time Synchronization

All Files.com systems are synchronized using industry-standard NTP sources for accurate timestamps across infrastructure.

Code Escrow

Files.com does not use third-party code escrow services.

Log4j Vulnerability

Read our full response to the 2021 Log4j vulnerability.