How Fil One supports the frameworks your compliance teams ask about.
Compliance comes down to scope. Ours covers two: the data centers that store your objects, and the network and software Fil One runs on top of them.
Fil One runs the network and writes the software that stores your data. We're now pursuing the same attestations for Fil One itself.
Every framework your compliance team asks about, and its status today.
Rules for protecting health information, with HITECH adding breach notification duties. Sign a BAA with Fil One before storing any PHI.
FBI requirements for systems that store or process criminal justice information (CJI).
You are the controller for personal data you store, and Fil One processes it on your instructions. Buckets placed in Europe keep data in the EU.
An independent audit of how security, availability and confidentiality controls operate over time, not just on one day.
The international standard for running an information security management system (ISMS) with documented risk treatment.
The US federal catalog of security and privacy controls, used by agencies and their vendors.
AES-256 on every object. Or encrypt client-side yourself.
All traffic to the S3 endpoint runs over TLS.
Turn on per bucket for compliance retention.
Verify your data is stored, without downloading it.
Our policies are public. DPA and BAA made available upon request.
Questions about security, compliance, or need a document? Our team can take care of you.
Security questions: security@fil.one · Legal terms: legal@fil.one