03 — Security

Boring, obsessive, unbreakable

Security should be the least interesting thing about your file storage, because it simply never gives you a reason to think about it. Here is what sits underneath every upload, in plain language.

A data centre corridor housing Stowa's encrypted storage

Encryption

Files are encrypted with AES-256 while stored and TLS 1.3 while moving. Keys are rotated automatically and held apart from the data they unlock.

Redundancy

Three geo-separated copies of every file, verified hourly. A whole facility can fail without you noticing anything at all.

Access control

Single sign-on, SCIM provisioning, per-folder roles and device approval. People see exactly what they should and nothing else.

Audits

SOC 2 Type II, ISO 27001 and GDPR compliance, with a full exportable audit log of every view, edit, share and delete.

Recovery

Ransomware rollback restores an entire account to a point in time. Deleted files are recoverable for up to a year.

Privacy

We never scan your content for advertising, never sell data, and never train models on your files. Your work is yours alone.

AES-256

Encryption on every stored byte, at rest and in transit.

99.99%

Uptime, written into a real service level agreement.

< 1 hr

Median support response, every day of the week.