Can Claudyx read my files?

No. The Claudyx team has no access to your file contents. We only process metadata (name, date, size, who uploaded) and manage permissions — we never read file contents. If you use your own AWS/Azure/SharePoint/Google Drive, files physically reside only with you.

What happens to data if we stop paying?

30 days after subscription ends, you have full access to download all files and export the audit log. After 30 days, we delete data irreversibly from all servers. We never sell or share data with third parties.

Can MFA be enforced for the entire company?

Yes. As admin you set MFA policy at company level — users without MFA configured cannot log in. We support hardware keys (WebAuthn) and software authenticators (TOTP).

Where exactly are Claudyx Drive servers?

EU-West (Amsterdam) and EU-Central (Frankfurt). Data does not leave the EU. Exact sub-processor locations are listed in the DPA agreement.

Security — How Claudyx protects your business documents

Where is your data?

Only where you choose

Claudyx is just the manager — your files live where you configure them. No forced central storage, no lock-in.

Claudyx Drive

Our own storage. Servers exclusively in the EU (Frankfurt, Amsterdam). Ideal for companies without their own infrastructure.

EU · encrypted · fastest setup

Your AWS S3

Files live in your AWS account. Claudyx never has access without your configuration. You own the data.

your ownership

Your Azure Blob Storage

Connect your Azure account and files physically reside with Microsoft. Claudyx only manages access and metadata.

your ownership

Your SharePoint

Documents stay in your company's SharePoint libraries. Claudyx adds granular permissions and audit that SharePoint itself lacks.

Microsoft 365 environment

Your Google Drive

Connect your Google Workspace. Files stay in your Google Drive, Claudyx manages access and workflow.

Google Workspace

Where your files live

Your company

Data owner · GDPR controller

Claudyx

Access manager · Metadata · Audit

Claudyx Drive (EU)

AWS S3 (your account)

Azure Blob (your account)

SharePoint (your tenant)

Google Drive (your account)

For IT teams

Technical specifications

Area	Specification
Runtime	Cloudflare Workers (serverless edge) · 300+ data centers
Encryption at rest	AES-256-GCM · key rotation every 90 days
Encryption in transit	TLS 1.3 · HSTS (max-age=31536000) · OCSP stapling
Authentication	Supabase Auth + JWT · WebAuthn (FIDO2) · TOTP (RFC 6238)
MFA methods	Hardware key (YubiKey, TouchID, Windows Hello) · Google Authenticator · Authy
Database	PostgreSQL (Supabase) · Row-Level Security (RLS) · EU region
Audit log	Immutable append-only log · server timestamp + IP · CSV/JSON export
DDoS protection	Cloudflare WAF · Bot Management · Rate limiting · Challenge pages
Availability (SLA)	99.5% (PROFESSIONAL) · 99% (BUSINESS) · status.claudyx.com
Backups	Claudyx Drive: daily snapshot · own storage: per your policy
Sub-processor certs	Cloudflare: SOC 2 Type II, ISO 27001 · Supabase: SOC 2 Type II
Sensitive config	ISDS passwords, API tokens: AES-256 + master key · never plaintext

Ready to try secure document management?

Free trial, no credit card required. Full access to all features.

Try free for 30 days Book a demo

Your data is safe.Really.

Only where you choose

Technical specifications

Ready to try secure document management?

Your data is safe.
Really.