Your documents, guarded like a vault.

Your documents and your workspace's database are stored in Switzerland, on Microsoft Azure in the Zurich region, on infrastructure we run and configure ourselves; database backups stay in the same region. To read documents, Filetable works with several leading AI providers — Anthropic (Claude), Google (Gemini), Microsoft, Mistral AI and OpenAI (GPT) — under data processing agreements, and may use any of them for a task. We prefer processing in Europe where a provider offers it, and our sub-processor list names every provider, the countries where each may process data and the safeguard for each transfer. Address completion may send addresses outside Europe, as the data processing agreement sets out. Your documents are never used to train AI models.

HTTPS in transit (TLS 1.2 and 1.3). Our hosting provider encrypts stored data at rest with AES-256, file storage and database alike. On top of that, original files are encrypted before they are stored, each with its own AES-256-GCM key: files you upload are encrypted in your browser, before a byte reaches our storage; files that arrive another way — sent to your Filetable address, or generated from your data — are encrypted on our servers before they are stored. The text and values read from them are kept in your workspace's database so they can be searched and edited; it is a managed database reached over certificate-verified TLS, with backups kept in the same Swiss region.

Coming soon: secure fields, which encrypt the values of a chosen field with a key of their own — masked on screen, revealed only with a line in the audit log — and your own key, which keeps the key Filetable's encryption at rest depends on in your own key vault.

Filetable operates under the Swiss Federal Act on Data Protection (FADP) and the EU General Data Protection Regulation (GDPR). Our privacy policy, cookie policy, terms of service and data processing agreement are published in full. As a young company, we do not yet hold SOC 2 or ISO/IEC 27001 certification; we intend to pursue certification as we grow, and we answer security questionnaires in full.

Role-based access per workspace: owners, admins and members. Access per table, folder and file — for people or groups — is coming soon. Recent changes can be undone for 30 minutes after they are made. Support access to your workspace is permission-gated and logged from start to finish.

Found a vulnerability? Email security@filetable.com. We acknowledge every report within 24 hours.