Security & Trust

Built for the file you
can't afford to
lose control of.

Every layer of FileLink is designed around one principle: you should always know who has your file, what they did with it, and be able to take it back.

AES-256 encryption, end to end

Your files are encrypted with AES-256 both in transit (TLS 1.3) and at rest. The file blob is never exposed to the browser's file system — it streams directly into a sandboxed viewer that blocks download, copy, and print vectors.

TLS 1.3 in transitAES-256 at restZero file-system exposure

Q3_Investor_Update.pdf

12 pages · 2.4 MB

Encrypted
In transitTLS 1.3 · AES-256-GCM
At restAES-256 · server-side
StreamingNo local file written

Verify your identity

Enter the 6-digit code sent to ravi.menon@acmecapital.in

4
8
2
1
7
9
Code expires in 4:58

OTP identity verification

Before anyone views your file, they must verify their identity with a 6-digit OTP sent to their email. No OTP, no access — period.

One-time code sent to recipient email
5-minute expiry, max 5 attempts
Required before file streams

Forensic watermarking

Every view is stamped with a dynamic, per-viewer watermark — their name, email, IP address, and timestamp overlaid on every page. If a screenshot leaks, you know exactly who did it.

Name, email, IP, and timestamp on every page
Diagonal overlay — impossible to crop out
Unique per viewer session
Q3_Investor_Update.pdf — Page 4
Ravi Menon · ravi.menon@acmecapital.in
103.21.48.x · 2:41 PM IST · 03 Aug 2026

Real-time audit trail

Every interaction with your file is logged — who opened it, when, from where, on what device, and how long they spent on each page. Exportable for compliance reviews.

Recipient identity (OTP-verified)
IP, city, device, OS, and browser
Per-page dwell time
Exportable CSV / PDF report

Audit Log — Q3_Investor_Update.pdf

Live
Opened2:41 PM
Ravi Menon
Mumbai, IN · 103.21.48.x
iPhone 15 · SafariDwell: 3m 57s
Page 4 dwell2:44 PM
Ravi Menon
Mumbai, IN
Financials slideDwell: 63s
Opened3:12 PM
Priya Sharma
Bengaluru, IN · 49.36.x.x
MacBook · ChromeDwell: 5m 22s

Data residency & compliance posture

CERT-In-aligned

FileLink's logging capabilities align with CERT-In directions for security incident reporting — timestamped access records, IP tracking, and exportable audit trails that support incident response and regulatory review.

MeitY guideline alignment

Our architecture supports MeitY guidelines for Indian enterprise data handling — encrypted storage, access controls, identity verification, and comprehensive logging suitable for government and regulated industry use.

FileLink supports compliance posture alignment. Specific compliance certifications depend on your plan and deployment. Contact our security team for details.

Email attachment vs FileLink

The difference is control. And traceability. And everything else.

CapabilityEmail AttachmentFileLink
Control after send
Instant revocation
Who opened itMaybe (read receipt)Yes — name, email, OTP-verified
Location & device
Time spent per page
WatermarkingDynamic, per-viewer
Copy on recipient deviceYes — permanentZero — streamed only
Audit trailNoneFull, exportable

Talk to our security team.

Get a walkthrough of the architecture, or request a demo on your own files.