# Security

> Data encryption, cryptographic integrity verification, access boundaries, and infrastructure.

MMW Cloud is engineered with data protection and confidentiality at its core.

## Per-file encryption (AES-256-GCM)

Every uploaded object undergoes compression and encryption using the authenticated AES-256-GCM cipher:

- Unique account keys: encryption binds to cryptographic keys managed for your authenticated account.
- Secure transport: all client-server communications travel across TLS-encrypted network channels.

## Cryptographic integrity verification

To ensure files arrive intact, the platform uses client-side SHA-256 hashing:

- The checksum is computed locally within your browser before upload transmission begins.
- The storage cluster verifies received payloads byte for byte against the submitted digest.

## Expiring signed links

File retrieval uses secure temporary link architecture:

- Download URLs carry signed capabilities with short validity windows.
- Expired links become invalid automatically and cannot be reused.
- Unauthenticated public file sharing is not supported.

## Session and device visibility

The system ensures complete transparency over active workspace logins:

- The Profile tab lists devices connected through a sync app, and you can revoke any of them.
- Sessions can be terminated using the Revoke action to prevent unauthorized access.

## Data center infrastructure

Files reside in protected data centers equipped with multi-level physical access security, redundant power systems, and continuous operational monitoring.