HTTPS in production
Use HTTPS/TLS for browser-to-server communication and protect transfer links in transit.
Filevaro / Security
Designed for temporary file sharing.
Filevaro is built around controlled access, temporary availability and a clear file lifecycle. Here is what the service does and what production deployments should configure.
Security at Filevaro
Filevaro is designed to make temporary file sharing straightforward while keeping access controlled. The security measures below describe the current product direction; production infrastructure should be configured to match them before launch.
Expiring links
Transfers can have an expiry window so shared files are not intended to remain available indefinitely.
Access controls
Optional passwords and download limits can reduce unintended access to a transfer.
Data lifecycle
Uploaded files are stored for the period required by the transfer and are removed when the transfer expires through the application's cleanup process. Operational logs, email information and security metadata may still be retained where needed to operate, secure or comply with legal requirements.
For a public production launch, add rate limiting, secure object storage, signed URLs, malware scanning, encryption at rest, monitoring and regular security review as appropriate for your infrastructure.