Your files, protected by design
Security is built into every layer of MoveMyFiles — from how files are stored to how they're delivered and how forms are protected.
Private object storage
All uploads are stored on S3-compatible object storage with private ACLs. There are no public buckets — files are never directly accessible from the internet.
Time-limited presigned URLs
Downloads are served through short-lived presigned URLs that expire after 10 minutes, so links can't be reused or shared indefinitely.
Password protection
Transfers can be locked with a password. Passwords are stored as bcrypt hashes and verified server-side before any file is revealed.
Expiry & download limits
Every transfer has an expiration date and an optional download limit. Expired files are automatically removed by scheduled cleanup jobs.
Prepared statements & CSRF
All database access uses parameterized prepared statements to prevent SQL injection, and every form is protected with CSRF tokens.
Verified anonymous transfers
Anonymous uploads require email verification before files are sent, with rate limiting on verification codes to prevent abuse.
Encryption & compliance
Files are encrypted in transit over TLS and stored on infrastructure in GDPR-compliant EU data centers. We retain only what's needed to deliver your transfer, and expired data is purged automatically.
In transit
EU data centers
On expiry