Keep your files safe with ownCloud

This article preceded by
ownCloud's security features

Setting new standards in data safety for both users and admins, ownCloud’s protection system will ensure the best solution for your specific requirements. You can opt for several safety features, which will make you flexible for all safety requirements regarding file sync, share and content collaboration.

Leading in open-source cloud security

How is ownCloud able to ensure the maximum safety for you? The data transfer is protected by ownCloud’s comprehensive encryption, which uses up to three layers of safeguards: encryption in transit, encryption at rest and end-to-end encryption (E2EE). The in transit encryption is provided by design and also by default. Applying the newest HTTPS standards, the newest TLS protocols are used in all supported browsers and clients. In fact, in transit encryption is mandatory in the European Union due to GDPR (General Data Protection Regulation).

For preventing breaches through physical access, ownCloud encrypts all files before storing them, which means they are encrypted at rest. With this setup, only the administrator can decrypt files, because he knows the master key. Alternatively, you can opt to encrypt the files at rest using a Hardware Security Module, exluding the system administrator from the ability to decrypt files. As you can see, the at rest encryption will protect you against stolen hardware attack scenarios and sets the groundwork for a zero trust environment within your organization.

In case of requiring the highest level of data secrecy and data protection, ownCloud offers end-to-end encryption. The premium plugin enables users and even guest users to share files and folders fully encrypted. At the same time, the person who uploaded the file is able to get an overview of how many and who in particular has access to the file(s). The end-to-end encryption feature works in any common, modern browser. A JavaScript plugin encrypts files on upload with public keys provided by the server. Vice versa, the decryption is also happening in the web interface, which requires the presence of the private key in the browser.

owncloud e2ee grafik 1

File protection at every step

Besides these comprehensive encryption measures, ownCloud has a bundle of features to increase data protection and secrecy of files, namely File LifecycleFile Locking or Document Classification. The File Lifecycle Management App archives and retains files depending on their upload date. Based on certain rules, files which are only used for a certain amount of time can be deleted or archived automatically, if critical data is contained. In return, files can be retained longer if needed. The File Firewall plugin checks every access request against a list of rules and policies, protecting against access through users outside of the corporate offices and or even disabling access from high-risk countries.

In case of working on files in parallel, ownCloud’s File Locking feature ensures safety and seamless collaboration all in one. It is avoiding simultaneous file saving by locking the file for an adjustable time. Misunderstandings and therefore data loss by several users working on the same file can be avoided with this extra.

Customized security

When sharing highly sensitive data, files and folders need an extra level of protection. Think of sharing board meeting notes or annual performance reports. In these cases you restrict access to a certain group of people, and also restrict downloading, printing or sharing these documents. ownCloud automatically tags files accordingly by recognizing significant cues in the meta-data of common office documents. Of course, files can also be tagged manually.

Document Classification Infographic

For the perfect safety roundup, ownCloud provides the Ransomware Protection feature and in addition an Antivirus feature. Ransomware Protection blocks malware from encrypting files and folders, effectively neutralizing such attacks. The Antivirus app scans uploads for infections with viruses, trojans, and other malware.

With all of these features for data security in place, ownCloud provides the perfect solution for all requirements regarding safe and trustworthy sharing, synchronisation and content collaboration. Alongside data security, you can check out more safety features regarding authentication.