Your data security and privacy—our priority
Worried about accidental data leaks and potential fines and other unwanted effects on your business? Audits, regulatory compliance and securing personal information are key to any business today.
M-Files provides enterprise-level security to guarantee the security and privacy of your documents and data. You can rest assured that we do our best to help you safeguard the security and privacy of your, or your customers’ data.
We believe that data must be accessible by those who are granted access, and only by those with granted access. At all times, with no exceptions.
Human error is often the reason for security breaches and accidental leaks. To combat this, you need to have safeguards in the system itself to prevent such incidents – and this is exactly what M-Files provides. Proper information management practices are an essential part of your overall data security and integrity. They let you take control of your company’s and your customers’ data.
Automate data security with metadata-driven permissions that allow fully automatic control of access (read, edit, delete, change permissions) for any particular object based on its type or attributes. Permissions change with context of your content so that e.g. when an employee changes jobs, you don’t need to worry about permissions on all the related data.
M-Files supports managing content automatically in complex hierarchical structures, as well as sets permissions automatically based on those structures and reacts to changes.
Whether it is AD integration with single sign-on to enable flexible and secure access control into the system, or LDAP, SSO and MDM solutions already a part of your infrastructure, M-Files can be integrated to support secure access to data.
Preservation of old versions and the ability to revert to previous versions is built into M-Files. Check-in and check-out functions, so you can keep track when a file is being edited and who is making changes. The version history automatically saved every time a change is made in the content or metadata creates a seamless audit trail of who updated what and when, as well as the lifecycle of the document with tracking of logins, logouts, password changes and user group changes.
Automatic workflows let you govern the way documents are managed, shared and stored and therefore help you comply with company guidelines, industry standards, and legal regulations. Additionally, permissions can change automatically as the document moves through a workflow, from draft to approval to signature.
Printing and downloading of documents can also be disabled as well as screenshots of the mobile application. Users can preview documents but they are prevented from printing or downloading.
You don’t have to take our word about keeping your data secure and private. We have numerous 3rd party certifications to prove it. And we are compliant with major industry regulations.
It is imperative that your data is fully protected whether it’s being transmitted over a network or at rest so that no one gains unauthorized access to your information.
M-Files encrypts network communication between M-Files clients (M-Files Desktop, M-Files Web and M-Files Mobile) and M-Files Server via HTTPS, RPC, VPN or IPSec
M-Files encrypts data at rest with the AES-256 algorithm (compliant with the FIPS 140-2 standard)
M-Files supports database encryption via Microsoft SQL Server Transparent Data Encryption (TDE)
M-Files provides comprehensive data loss prevention mechanisms out-of-the-box:
For fast recovery in the event of hardware failure or other disasters, M-Files supports vault replication in additional geographic locations.
Deploying strict password policies, such as password complexity and expiration rules is a great way to improve data security.
M-Files cloud is managed by our professional Cloud Operations team 24/7.
M-Files is hosted in Microsoft Azure. Microsoft has several verifications in place to ensure the security of the Microsoft Azure Cloud. The Azure cloud offers several features to support security, such as:
M-Files Mobile provides encrypted connections (HTTPS) for M-Files Server as well as AD integration, OAuth 2.0 support, and support for pre-shared key authentication. We support mobile device management software such as Mobile Iron and Blackberry Dynamics. You can force users to use a VPN connection, or M-Files to ask for a PIN code.
The availability of data the ability to minimize system downtime are critical to business. We use both our own methods as well as Microsoft’s to ensure high availability.
M-Files Server can be run on common virtualization platforms, such as Microsoft Hyper-V and VMWare vSphere Hypervisor.