FileCloud plugs data leaks with Smart DLP

FileCloud has added data loss prevention via the release of Smart DLP.

FileCloud is an enterprise file synchronisation and sharing system (EFSS) supplier that runs on-premises or in the public cloud; AWS and Azure. It is an alternative to Owncloud, Box, Dropbox, and Egnyte and can be run as a self-hosted cloud or hybrid private/public cloud storage. 

The intention for Smart DLP is to prevent data leaks and safeguard enterprise content. The softwarew allows or bars file-level actions based on applied and pre-set rules that are checked in real-time. In effect the access rules form a layer of custom metadata about files managed by FileCloud and Smart DLP is the gatekeeper. 

We think the idea of using a repository’s file metadata as the basis for data loss prevention processes is a simple, smart and obvious – with hindsight – starting point. The concept has a lot of merit, subject to the admin overhead of setting up the rules and applying them.

Governance

Smart DLP is claimed to simplify compliance with GDPR, HIPAA, ITAR and CCPA data access regulations by identifying and classifying data. The product supports external security information and event management integration (SIEM) and SMS 2FA. 

Smart DLP rule management screen. Applying rules like this to thousands or tens of thousands of files will need some kind of process.

Enterprise data leak prevention features include the automation of prevention policies, monitoring data movement and usage, and detecting security threats. An admin person is required to define and apply the rules to files in the FileCloud repository.

Smart DLP controls user actions, such as the ability to login, download and share files, based on IP range, user type, user group, email domain, folder path, document metadata and user access agents; web browsers and operating systems. It will allow or deny selected user actions and log rule violation reports for future auditing.

A download stopped by Smart DLP.

The product will also find personally identifiable information (PII), protected health information (PHI), payment card information (PCI) and other sensitive content across user databases and team folders. Users can deploy built-in search patterns to identify PII and create custom search patterns and metadata sets for vertical business content.

FileCloud is a product of CodeLathe, a privately held software company, founded in 2016 and headquartered in Austin, TX. It claims 3000-plus business customers for File Cloud and more than one million users.