Document Safety and File Integrity on the Onefile Platform

Overview

This article explains how documents are handled within the Onefile platform and outlines the safety measures in place to protect users and maintain file integrity.
Onefile provides a secure environment for storing and transferring documents. It is intentionally designed to act as a secure repository and does not read, analyse or alter the informational content of any file uploaded by a user.

How Onefile Handles Uploaded Documents

Zero‑Interference

When a user uploads or downloads a document:

• The platform does not open or inspect the contents of the file.
• The platform does not modify or change the file in any way.
• Files pass through the system exactly as supplied by the user.

Secure Transfer

All document transfers use encrypted connections, ensuring files remain private and secure during upload and download.

File Validation and Allowed Formats

Onefile uses structural validation rather than content scanning. This ensures security without compromising user privacy.

• Broad Compatibility: Onefile supports a wide range of file types commonly used for evidence (office documents, media, design files, technical formats).
• Blocking Executables: Executable files such as .exe are strictly blocked to prevent the upload of files that could run commands on a device.
• MIME‑Type Validation: The system checks a file’s technical signature to ensure it is not a disguised executable.

This approach allows users to upload a wide variety of evidence formats safely, while ensuring Onefile never “runs” a file or accesses its internal contents.

Virus and Malware Protection

Because Onefile does not process file contents, it does not perform server‑side malware scanning. Instead, all virus detection happens on the user’s own device.

• Endpoint Scanning: Files are scanned by the antivirus software installed on the user’s device.
• Passive Storage: Files remain stored in an inert state within Onefile and are never executed.
• No Interference: The platform never alters or interacts with user data.

User Responsibilities (Terms & Conditions)

The Onefile Terms & Conditions include requirements to help maintain a secure environment:

• 4.4 – Acceptable Content: Users must not upload offensive, unlawful, or harmful files.
• 4.6 – Software Integrity: Users must not tamper with the platform or upload malicious code.

Guidance for Users on Personal Devices

If users or assessors access Onefile from a personal device, they must ensure:

• Their antivirus software is installed and up to date.
• All files are scanned automatically by their local device when opened or downloaded.
• No additional scanning occurs within the Onefile cloud environment.

Tips & Notes

• Onefile is a secure evidence repository, not a file‑execution environment.
• Users should maintain good device hygiene and up‑to‑date antivirus software.
• Executable files are blocked for safety and will not upload.

Terminology

Terminology in this article may differ depending on your Centre setup or security policies.

Need Help?

If you encounter any issues or have questions, please contact Onefile Support or your internal support channels.