Snapshot 160488
Raw (normalized text)
Scripts and page chrome removed; this is what change detection compares.
Skip to navigationSkip to main content Files.com Trust Center Files.com is the secure, cloud-native File Orchestration Platform. Full Compliance DocumentationOpens in new tab Security Reference GuideOpens in new tab security@files.com Privacy PolicyOpens in new tab Our aim is an industry-leading level of transparency: enough specific information for customers to understand our practices, evaluate our commitments, and decide how Files.com fits into their own control environments. We provide that via this Trust Center and via our Full Compliance DocumentationOpens in new tab website. Subscribe to updates to receive notifications of significant events. Compliance SOC 2 FedRAMP 20x HIPAA GDPR PCI DSS - SAQ D, SP and ROC Prep Digital Operational Resilience Act CCPA W WCAG 2.1 Level AA Subprocessors View all AWS • Infrastructure, database, and storage United States of America (and other regions if selected by the customer) To enable the Files.com service, we engage Amazon Web Service (AWS) as a sub-processor. AWS meets our rigorous security and confidentiality standards, which we would require from any future subprocessors. OpenAI • AI inference services. United States Anthropic • AI inference services. United States of America Resources View all Documentation Links Files.com Public Compliance Documentation Opens in new tab Service Level Agreement Opens in new tab Files.com Privacy Policy Opens in new tab Files.com Shared Responsibility Model Opens in new tab SOC 2 Reports Files.com 2025-2026 SOC 2 Engagement Letter Action Verb (Files.com) SOC 2 Type II Report, 2026-2027 Files.com SOC 2 Bridge Letter (2026).pdf Action Verb (Files.com) SOC 2 Type II Report, 2025-2026 View 4 more PenTest Completion Letters Files.com Penetration Test - 2025-2026 Files.com Penetration Test - 2024-2025 Files.com Penetration Test - 2023-2024 Files.com Penetration Test - 2022-2023 View 3 more CSA Star CAIQ Lite v4.1.0 - 9-11-2026 CAIQ Lite v4.0.3 - 9-25-2025 PCI-DSS PCI-DSS v4.0.1, AOC for SAQ-D - Service Provider, Files.com PCI-DSS v4.0.1, SAQ-D - Service Provider, Files.com Files.com - PCI-DSS-v4.0.1-Responsibility-Matrix FedRAMP Documentation FedRAMP Class A Certification Report Files.com FedRAMP Class A Certification packageOpens in new tab Files.com FedRAMP Certification Data - Machine Readable Opens in new tab Files.com Class A Security Decision Record - machine readable View 35 more Files.com Documentation Files.com Accessibility Conformance Report (VPAT) 2026 Other resources Files.com Public Security Reference Opens in new tab FAQ View all Updates View all Compliance Files.com Is Now FedRAMP Certified Published August 31, 2026 Files.com is now FedRAMP Certified. Our FedRAMP Marketplace listingOpens in new tab went live on August 27, 2026. Files.com earned Class A certification through the Program Certification path under FedRAMP 20x, the federal government's newly rebuilt cloud security program. We are among the first two cloud services to earn Class A certification. The application pipeline opened on August 3, and our certification was granted 24 days later. For our customers, this means there is now a public, government-published record of our security posture. For federal agencies and contractors evaluating Files.com, it provides a clearer and faster starting point for their own reviews. Compliance Files.com 2026-2027 SOC 2 Type II Completed Audit Published July 21, 2026 Our most recent SOC 2 Type II audit was conducted by Kirkpatrick Price, an audit firm specializing in cloud and SaaS platforms. Audit Period: April 1, 2025 – March 31, 2026 Final Report Issued: May 18, 2026 Next Audit Period Start Date: April 1, 2026 Next Anticipated Final Report: May 30, 2027 Files.com has completed multiple SOC 2 Type II audits with Kirkpatrick Price in previous years. Controls View all Infrastructure security Unique production database authentication enforced Encryption key access restricted Unique account authentication enforced View 18 more Infrastructure security controls Organizational security Asset disposal procedures utilized Production inventory maintained Portable media encrypted View 11 more Organizational security controls Product security Data encryption utilized Control self-assessments conducted Penetration testing performed View 2 more Product security controls Internal security procedures Continuity and Disaster Recovery plans established Continuity and Disaster Recovery plans tested Cybersecurity insurance maintained View 34 more Internal security procedures controls Data and privacy Data retention procedures established Customer data deleted upon leaving Data classification policy established