Trust centre
Where Fyle keeps your data, who processes it, how long it is kept, and which certifications we hold or plan. Fyle is in development: each item says whether it is available now or planned. The legal documents linked here are drafts pending review by a solicitor.
Last updated
Where your data lives
| Option | File content | Metadata and coordination | Availability |
|---|---|---|---|
| Fyle-managed (default) | Cloudflare R2; bucket location to be confirmed before launch | Database: Neon, London (AWS eu-west-2). API: Hetzner, Germany or Finland (planned) | Personal, Team and Enterprise |
| Region-locked workspace | An R2 jurisdiction, such as the EU | Hosted in the same region | Enterprise, planned |
| UK-only workspace | Your own UK bucket | A UK-hosted Fyle coordinator and database | Enterprise, planned |
| Bring your own storage | Any S3-compatible bucket you choose: AWS S3, Google Cloud Storage, Cloudflare R2, MinIO, Ceph | Fyle-hosted, or deployed with you | Enterprise, planned |
- A region lock is chosen when a workspace is created and covers file content, metadata, search indexes, previews, caches, logs and backups, not only the bucket.
- Moving a workspace to another region means copying it into a new workspace; the dashboard states which jurisdiction each workspace is locked to.
- Cloudflare R2 has no UK-only jurisdiction, so UK-only residency uses your own UK bucket.
- Enterprise deployments can be Fyle-hosted and dedicated, run in your own cloud account, or on-premises.
Subprocessors
| Provider | Used for | Location | Status |
|---|---|---|---|
| Cloudflare, Inc. | Hosting the website and web app (Workers), DNS, TLS, and object storage for file content (R2) | Global edge network for web requests | In use |
| Neon | Managed PostgreSQL database: accounts, organisations, sessions and file metadata | United Kingdom (AWS eu-west-2, London) | In use |
| Resend | Sending transactional email (sign-in links, verification, invitations, security and billing notices) | United States | In use |
| Stripe | Taking payments, subscriptions, invoices and tax calculation (Stripe Tax) | United Kingdom, European Union and United States | Planned |
| Hetzner Online GmbH | Hosting the Fyle API servers that coordinate files, versions and sync | Germany or Finland (Hetzner has no UK region) | Planned |
What data each one handles, and how we tell you about changes: subprocessors.
After a subscription ends
- Step 1: Day 0–30Read-onlyMount your files read-only and download or export everything. No new changes and no new agent sessions.
- Step 2: Day 30–60LockedSign in, resubscribe or ask us for an export. Files can't be mounted.
- Step 3: Day 60–90Pending deletionAs locked. We send final notice emails before deletion.
- Step 4: Day 90 onwardsDeletedFile content, versions, metadata, search indexes and caches are deleted. Billing and audit records we must keep by law are retained.
Enterprise contracts can set their own retention, deletion and legal hold. Full details, including version history and backups: data retention.
Security and certifications
| Certification | Status |
|---|---|
| Cyber Essentials Plus | Planned, first |
| ISO/IEC 27001 | Planned, as Enterprise customers need it |
| SOC 2 Type II | Planned, as Enterprise customers need it |
Fyle holds no certification yet. How files and accounts are protected today, and what is still being built: security.
Documents
- Security overview and security.txt
- Privacy policy (draft)
- Data processing agreement (draft)
- Subprocessors (draft)
- Data retention (draft)
- Cookie policy (draft)
- Terms of service and acceptable use policy (drafts)
Contact
Security reports: security@fyle.sh. Privacy and data protection: privacy@fyle.sh. Security questionnaires and Enterprise requirements: legal@fyle.sh.