Security

Data security at FileXpress

Effective date: February 1, 2026

Our commitment to security

At FileXpress we understand that your company's data is its most valuable asset. That's why we designed bank-grade security infrastructure to protect your information at all times.

End-to-end encryption

All data is transmitted over TLS 1.3 and stored with AES-256 encryption at rest, so your data stays unreadable even in the unlikely event of physical access to a server.

Cloud infrastructure

FileXpress runs on Amazon Web Services (AWS), benefiting from some of the most rigorous security standards in the world, including ISO 27001, SOC 2 and HIPAA compliance.

Auditing and monitoring

We keep detailed logs of all sensitive operations. Our system monitors unauthorized access attempts and anomalous behavior around the clock.

Backups

We run hourly incremental backups and daily full backups, stored across multiple availability zones to ensure business continuity.

Access control

Two-factor authentication (2FA): we recommend and support 2FA for all user accounts.
Granular permissions: define exactly what each employee can see and do on the platform.
Data isolation: each customer's data is logically isolated at the database level to prevent any cross-tenant data leakage.

Responsible AI

The FileXpress data agent queries your information in read-only mode: it never creates, changes or deletes data, and every figure it mentions comes from a real query against your company.

Report a vulnerability

If you're a security researcher and have found a vulnerability in our system, please report it immediately to security@mangostudios.com.sv.