Don’t get me wrong, Dropbox is a great app. With the proliferation of mobile devices, the consumerization of IT is inevitable and services like Dropbox provides an easy way for users to sync their files between all their devices.
But it’s not for business.
A lot of their inherent security flaws have been brought into light lately by researchers Derek Newton (Dropbox: Insecure by Design?) and Christopher Sohogian (How Dropbox Sacrifices User Privacy for Cost Savings) – Christopher also filed a FTC complaint against Dropbox’s security claims. In most recent news, they even left all user accounts unlocked and accessible to anyone with any password for 4 hours. You can also read about the incident on TechCrunch’s story here.
Consumer applications in general are just not meant for business use. They were designed to serve a basic use case: for users to access files on both their desktop and their new mobile phone. But for businesses, there are other security and management factors where a solution provider needs to take into consideration. How can we maintain control over files scattered across multiple teams, across all these different platforms and devices? How would the solution work between multiple users? How can we verify where our company data is stored?
For businesses, this list of requirements for security and control goes on. And for us, security is always a priority, not a tradeoff.
How Oxygen Works
Oxygen provides the same ease of use as other consumer applications – giving you native access to all your files from all your devices, but at the same time providing your company with full control and enhanced security over all of your data.
Easy Access with Local File System Integration
Everyone loves Dropbox because its easy. We understand that user experience is critical and we spent a lot of time working on providing a seamless experience for our users. Oxygen directly integrates with local file systems so it shows up as another mounted drive/volume on your desktop (and no, not like Webdav). You can directly browse, open, edit. save and organize files the same way you do with a regular file system without having to change your workflow.
Syncing files with Oxygen is a breeze:
- Files saved into Oxygen are automatically synchronized to the cloud
- Freedom to selectively sync and unsync files based on what you need
- Ability to view unsync files so you can get them when you need
- Access all the files synced on your device’s local cache even when you’re offline
So now this brings us to…
Why Oxygen is a better, more secure file storage and sharing solution for businesses:
1. Team & Multi-group Approach to Sharing
As Jeff previously posted – “With individualistic, consumer-oriented products, users control files and create their own shared folders. Only a folder creator can remove people from a shared folder. But what if an individual leaves the team or company? They’ve just taken the group’s data with them. Also, if every individual had rampantly created their own folder sharing relationships, there could be a tangled mess to sort through. How do you guarantee that nobody forgets to unshare a folder with that former employee? The boundary between the team and the individual must be clear.”
On Oxygen, the ownership and control over data remains with the company as oppose to scattered over different users. Accounts are created within the context of a team, group or company. If a member leaves, your company’s admin can easily disable the user and revoke their access to company data on Oxygen.
Oxygen’s spaces unites the concept of users and files. Create different shared spaces and set specific access permissions for other users. Working with someone outside of your team or company? No problem. Invite them as a guest and they will only have access to that one specific shared space. Don’t want to share all the files in the space? No problem. Just create a password protected link for the file you need to share.
You can learn more about the details on how to collaborate with others from our sharing and collaboration features list.
2. A Controlled & Secure Container for All Your Data
Encryption, Encryption, Encryption!!!
Oxygen automatically encrypts all your data. We use SSL to encrypt data in transit, and AES 256 bit encryption for data at rest. We also encrypt all your data stored locally on all devices.
This is unique to Oxygen because most other services do not encrypt the data that’s been downloaded onto user devices. Oxygen serves as an end point protection and a complete, secure container for all your files saved on our platform. And yes, that means encryption for data on all mobiles devices such as iPhone, iPad and Android as well.
In other solutions without local device encryption, once the file is downloaded it automatically becomes unprotected and unmanageable. With Oxygen, local encryption provides an extra layer of security, in the case where someone gains access to your lost laptop, all the data stored on Oxygen would be in an unintelligible form once your Oxygen user session expires.
Each file content has its own server generated unique encryption key, and the keys are stored separately from the content on a different server and managed in the cloud. The file can only be decrypted when an authenticated user logs in and opens the file.
Oxygen provides 3 layers of protection for user authentication:
- A unique key is generated per device
- User’s login credential (user ID and password) is encrypted using the unique key per device
- Then the login credentials are encrypted again on the device’s encrypted cache
This authentication model also protects against a user’s data being copied over onto a different machine – because it will not be able to decrypt the unique key that stores the user login credential that is associated to the specific machine.
Account membership and access permissions are centrally managed on Oxygen. A team/company administrator can easily add or disable users through a web administrative console. We provide granular permissions on both account and shared space level. Assign read only, read + write and even manage rights to different users in your company. All guest users are also centrally managed by the administrator as well, so you can easily invite guest or revoke their access to maintain control over your company’s shared spaces.
With Oxygen, you always maintain control over your company’s data that is shared and synchronized between users and devices.
3. Enterprise Support
Oxygen supports LDAP/AD integration for simplified deployment and management. After deploying our authentication gateway securely behind your corporate firewall, users can benefit from single sign on and self-provisioning by using their LDAP existing credentials.
Cloud Storage Brokering: Public, Private & Hybrid Clouds
One of the major concerns for enterprise when they consider adopting cloud storage is – “Where is my data?”. To address that concern we provide enterprise clients the ability to choose where company data is stored. Mix and match between different storage providers so your company can meet specific performance, cost, security and compliance requirements. Storage brokering is a key benefit that’s unique to Oxygen. Our virtual file system is the middle layer that unifies different storage clouds — making cloud storage directly available for all company users, and much easier to deploy and manage.
Currently our cloud partners include AT&T, EMC, Savvis, and AWS.
It is our goal here at Oxygen to deliver a simple, controlled and secure cloud storage solution for the modern-day business. The line between personal devices and work life will continue to blur, and it should not be a tug of war between the two sides. Oxygen is the answer for businesses to adopt cloud storage – providing easy file access and sharing by synchronizing across devices, along with full control and security for your company’s data.
You can also sign up and try Oxygen’s Cloud Drive for yourself!
Thanks for reading.
– Julia (@JuliaMak)