Conduct your everyday business with confidence that you're protected by industry-leading cybersecurity
Zero-knowledge storage
Encryption keys remain inaccessible to the platform provider, ensuring only authorized users can decrypt data. We can't view your data or files without your permission.
End-to-end encryption
In Filot, customer data is encryptred at rest and in transit by default. Stored in ISO/IEC 27001-certified data centers, customer data is our highest priority.
Business associate agreements
BAAs are available for all customers. Our standard agreement covers all requirements for handling your data.
Compliance
Confidently compliant
SOC 2 Type II compliance to show our commitment to protecting customer data.
Currently pursuing ISO/IEC 270011, GDPR, and HIPAA certification
It means Filot cannot see, access, or decrypt your files, even if we wanted to. Your encryption keys stay with you, not on our servers. If someone breached Filot's entire system, they would find only encrypted files with no way to unlock them.
Filot maintains immutable, tamper-proof audit logs of all file activity and system access. Learn more about our tamper-proof audit logs here.
Yes, we conduct annual third-party penetration testing and security assessments as part of our SOC 2 Type II compliance. We also conduct internal security reviews and code audits. We can share findings and remediation timelines under NDA for enterprise customers during security review processes.
SOC 2 Type II means an independent auditor verified that our security controls actually work over time, not just in theory. HIPAA, GDPR, and ISO/IEC 27001 are industry-specific or geography-specific standards. We're pursuing those to show commitment to particular regulatory frameworks.
Very granular. You can assign different permission levels to different users. Some people can upload and edit, others can only view, others can manage permissions themselves. The goal is that everyone has access to exactly what they need, nothing more.
