Security Reference

Files.com establishes who can connect, checks what they may access, and controls how file data moves between systems. Each check has a scope: authenticating a person, authorizing a session, and permitting a file transfer are related decisions with different lifetimes. Understanding those differences helps you evaluate a connection, plan access removal, or confirm how a workflow handles your data.

Authentication Checks by Connection Method compares the identity and second-factor checks used by interactive sign-in and independent credentials. Credentials and Access Revocation explains what ends access and what can remain authorized afterward. Desktop and Mobile App Sign-In and Share Link Invitations and Sessions address the particular checks used when a browser establishes access for an app or an invited visitor.

A connection's protection also depends on the protocol and the response being evaluated. Connection Encryption and Algorithm Selection distinguishes supported algorithms from those used by a client. HTTP Response Headers explains browser policies and their application to different kinds of responses.

Customer Isolation explains how site and Workspace boundaries relate to shared infrastructure. Transfer Data Paths and Temporary Storage distinguishes a file's destination from the systems that carry or temporarily hold it during a transfer.

Site-wide controls are described in Security Settings. Compliance covers organizational controls, commitments, and assurance materials.