Retained
A Retained record will be kept until retention ends, and deleted early only by two people with a reason.
unforged/folio
How we’ll keep your records safe
Your records will be protected at every level, and that includes protection from us.
- 1
Retention locks
Locked records will be held by the storage itself, underneath our software, so nobody will be able to delete them early.
- 2
Two people for anything early
Releasing a hold, shortening a class or deleting a Retained record early will need two different people.
- 3
A ledger that will show any change
Each event will be chained to the one before it, so a changed or missing entry will show up when the ledger is checked.
- 4
Outside time-stamps
Receipts and the ledger will be time-stamped by an outside authority, so the dates won’t rest on our word.
- 5
Your region
Documents, keys, the search index and the ledger will stay in the region you chose. Moving to another region will only happen when you ask, and it will be recorded.
- 6
We won’t look at your documents
Our team will see counts and health, never your documents. If we ever need to look, we’ll ask you first, with a reason and a time limit, and it will show in your own ledger.
Locked
A Locked record will be write-once: nobody, including you and us, will be able to change or delete it before its retention ends.
Your region, and its limits
Your documents, and anything we make from them, will stay in the region you choose.
- Fingerprints The hashes we’ll send to a time-stamping authority, never the documents themselves.
- Your account Your organisation’s name, plan, people and billing.
- Counts The numbers we watch to keep folio healthy.
Keeping your data in a region won’t put it beyond the reach of the law that governs the cloud provider underneath, which is US-owned. What we will guarantee is where your data is, who holds its keys and who can get to it.
Reasons
Every view, change and deletion will be recorded with a reason.
That’s an auditing feature you set for your organisation, not something the law asks of you.
What we’re claiming, and what we’re not
folio is designed to support your record-keeping obligations under UK GDPR and GDPR, and the long-term keeping of electronically signed documents.
It isn’t certified, and we won’t claim compliance with anything until an independent assessment of its controls has been published.