Security

Files that have been uploaded are encrypted using AES-256 before being saved to storage. Every time a file is downloaded it is checked to ensure that it is exactly the same as the file that was uploaded and has not been tampered with.

Safe4 does not support searching inside of files that have been uploaded. This is because the indexes cannot be encrypted and if compromised the content of the documents would be accessible.

You can add an extra layer of protection by requiring your users to implement 2-Factor Authentication. This will require them to register a mobile phone number against their user account, to which a 7-digit authentication code will be sent following a challenge whenever they login.

All files that are uploaded are checked for virus infections. This helps to ensure that Safe4 does not pass an infected file onto a third party damaging your reputation.

Safe4 provides support for your information security policies. Whitelisting enables you to control the individual types of files that can be uploaded – for example enforcing the upload of PDFs only to ensure that modifiable content is never uploaded. Where more stringent requirements are needed Safe4 provides support for validating protective markings.

Safe4 implements an easy to use and flexible permissions system to enable you to apply fine grained control over access to individual parts of the system for different users.

Safe4 is hosted by a world leading hosting partner – Rackspace at data centres based in the UK. Rackspace take security very seriously as well and are fully ISO27001 certified. See their website for more details.

Safe4 recognises that Security is only as good as it’s weakest link. This is why Safe4 have invested in achieving certification under the Cyber Essentials scheme – see http://www.cyberessentials.org.uk. This scheme recognises the  business processes and procedures that are implemented by Safe4 are meeting best practice government guidelines.