Security
Cloud upload security is of primary importance and is taken very seriously. Xpiks minimizes chances of compromising user data and commits to quickly disclose and mitigate security incidents.
Files
Your files will be stored for up to 7 days on Xpiks Cloud side.
Xpiks desktop application has only temporarily write-only permission to the file when you upload it to the cloud for the first time. After that the file can only be accessed by the server that performs the upload.
Login credentials
Your FTP login credentials are not stored on Xpiks server side and are encrypted in transit.
Every time you initiate a cloud upload, your FTP username and password are encrypted by a long randomly generated encryption key. Encryption key is a secret, shared between your local Xpiks application and server that runs the actual upload. Xpiks staff does not have access to your credentials.
Upload environment
Server that runs the upload does not have a persistent storage of it's own and it does not have access from the public internet into it. Before executing uploads, latest security updates are always installed first. Servers that run the upload are rotated frequently.