Trust centre
Your files never pass through our storage
Our services are designed so the most sensitive thing you hold, the documents themselves, stays in an account you control and can switch off.
Data residency
Where your data lives
| What | Where it lives | Who controls it |
|---|---|---|
| Your documents | Your Azure or AWS storage account | You |
| Who may sign in | Your Microsoft directory | You |
| Records, fields and audit trail | A database for your organisation alone, run by Xeres in the UK or in your own Azure tenant | Xeres, or you if you host it |
| The XeresDocs service | Microsoft Azure, UK South, behind Cloudflare | Xeres |
Controls
What protects your records
- Separate by design. Each organisation has its own database, its own storage and its own sign-in. A token from one organisation is refused at every other's address.
- Multi-factor sign-in. Required by default for every user, through your own Microsoft directory.
- No stored storage keys. XeresDocs reaches your storage through your own directory or an AWS role you created, and you can revoke either at any time.
- Short-lived file links. Each download uses a link that works for one file, for reading only, and expires after a few minutes.
- Malware scanning. Uploads are scanned by your cloud provider's malware scanner, in your own account, before anybody can open them.
- Files shown safely. Word documents and emails open in a sealed frame where nothing in them can run or call out.
- An audit trail nobody can edit. Every view, change and disposal is recorded, and the database refuses changes to past entries.
- Locks the storage enforces. At the Compliance level a file cannot be deleted before its date by anyone, Xeres included.
Assurance
Standards we measure ourselves against
We assess the product and our own processes against Cyber Essentials and ISO 27001, and track every gap until it is closed.
- Architecture overview. How the service, your storage and your directory fit together, and what crosses between them.
- Security questionnaire. Your own questionnaire answered, or our standard answers to start from.
- Backup and recovery. How your records database is backed up and restored, and what a restore leaves untouched.
Need our security pack?
Ask us for any of these documents, and we'll arrange a call with your security team if it helps.