Data Governance

Files need rules throughout their working life: where they belong, what a workflow will accept, how long they should remain available, and what happens when they are replaced or deleted. Data governance turns those requirements into consistent behavior instead of leaving each person or integration to make the same decisions independently.

This section helps administrators and workflow owners translate organizational requirements into site policies and folder settings. Begin with the data and its purpose. A temporary delivery folder may need routine cleanup, while a record archive may need preservation. An incoming file may need a compatible name before another system can process it. The appropriate controls depend on that intended use.

Consider the whole path the file follows. Storage location differs from transfer routing, and a rule on a Files.com folder may have different boundaries when the contents live on a Remote Server.

Permissions determine who can act; governance controls determine what happens to the data as they do. Each control has a scope and a trigger. Check both before applying a policy across native storage, mounted storage, and external systems.

Control Incoming Files

Upload restrictions can enforce naming, extension, and length rules. A filename rule cannot determine whether the contents are correct or safe. Malware Scanning inspects new uploads and holds them while scanning; Expectation content validation checks business data against your criteria.

An Inbox can collect submissions with registration and separate submission folders. Apply the relevant folder controls to its destination. Registration records what a visitor supplies; choose the appropriate authentication or access controls when identity must be verified.

Processing order matters when scanning, renaming, encryption, and routing are combined. Test the output and the failure path instead of treating the settings as independent switches.

Organize and Protect the Result

Organization rules can place and rename files according to supported patterns. Folder structure locks protect a hierarchy used by people and workflows, while folder permissions control file actions. Structure locks do not make file contents immutable, and Automations have their own documented lock behavior.

Custom metadata can record business context such as an invoice identifier or review status. A metadata value is useful context; it does not enforce access or approval unless the relevant process acts on it.

Configure GPG when the exchange needs file-level encryption beyond normal transport and storage encryption. Uploads and copies trigger folder-based GPG processing; moves do not. On a mount, GPG requires buffered storage and onward delivery. Maintain the appropriate keys and monitor processing outcomes.

Separate Expiration, Recovery, and Preservation

File Expiration deletes files based on their modification age. It is not an archival copy operation. Review existing files before enabling a rule because it applies retroactively. If files must be archived first, define and verify that separate step before deletion becomes eligible.

On a mount, expiration deletes files on the remote storage. The mount is an inheritance boundary, so configure expiration on or within it. Files.com native deleted-file retention does not recover those remote deletions; recovery depends on the remote system.

Deleted-file retention, Restore, and independent backups address different recovery needs. Test recovery of an earlier version, not just the presence of the latest synchronized copy. File retention does not extend the lifetime of activity records; plan log retention separately.

Archive Only Mode permanently prevents modification and deletion through the site. It is irreversible and belongs in a deliberately chosen archive environment. On mounted storage it cannot prevent someone changing the files directly on the remote system.

Govern Sharing and Observe Outcomes

Share Link policies control recipient access and expiration. Watermarks apply to supported previews; they are not a universal rewrite of every uploaded or downloaded file.

Use file history, settings-change records, and the relevant processing logs to verify policy behavior. Notifications report configured file activity, Event Channels route supported operational events, and Expectations detect missing or invalid deliveries. Check that a feature actually emits the event you want; a restriction or expiration rule does not imply a pre-expiration or rejection email.

Export required evidence through SIEM integrations under an appropriate retention policy. Controls applied through Files.com do not automatically govern direct access to external storage, so review that access with the remote system's owner as part of the same policy.