Security and local document storage

Overview

Working paper files may contain personal, commercial or confidential information. Treat uploaded documents as sensitive business data.

Good practice

Your organisation should:

• Restrict access to authorised users only
• Use strong passwords and secure accounts
• Keep hosting and server access protected
• Use HTTPS
• Back up important data securely
• Avoid sharing exported packages with unauthorised people
• Remove access when users leave

Local files

Some documents may be stored locally by the application depending on file type and configuration. Local storage should be protected by server permissions, backups and encryption where available.

External sharing

When sharing review files, only include what the reviewer needs. Use export exclusion for nodes that should not be shared.

Personal data

If documents include personal data, make sure your organisation follows its own privacy, retention and data protection policies.

Tips

• Review user access regularly.
• Keep files organised so confidential documents are easy to identify.
• Use reviewer files instead of sending full internal files where possible.